Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-5331

Опубликовано: 04 нояб. 2019
Источник: debian
EPSS Низкий

Описание

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
icoutilsfixed0.31.1-1package

Примечания

  • Fixed by: http://git.savannah.gnu.org/cgit/icoutils.git/commit/?id=4fbe9222fd79ee31b7ec031b0be070a9a400d1d3

  • https://www.openwall.com/lists/oss-security/2017/01/10/4

EPSS

Процентиль: 23%
0.00076
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 6 лет назад

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

CVSS3: 7.3
redhat
около 9 лет назад

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

CVSS3: 7.8
nvd
больше 6 лет назад

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

CVSS3: 7.8
github
больше 3 лет назад

Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.

suse-cvrf
около 9 лет назад

Security update for icoutils

EPSS

Процентиль: 23%
0.00076
Низкий