Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-4570

Опубликовано: 03 фев. 2017
Источник: debian
EPSS Низкий

Описание

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mxmlfixed2.9-1package
mxmlno-dsawheezypackage

Примечания

  • https://www.openwall.com/lists/oss-security/2016/05/07/8

  • https://github.com/michaelrsweet/mxml/commit/d8c0ba900728d47523d76ba4acf33176cd04647c

EPSS

Процентиль: 74%
0.00808
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 9 лет назад

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.

CVSS3: 5.5
nvd
около 9 лет назад

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.

CVSS3: 5.5
github
больше 3 лет назад

The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.

suse-cvrf
почти 9 лет назад

Security update for mxml

suse-cvrf
около 8 лет назад

Security update for mxml

EPSS

Процентиль: 74%
0.00808
Низкий