Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-14697

Опубликовано: 06 авг. 2019
Источник: debian
EPSS Низкий

Описание

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
muslfixed1.1.23-2package
muslno-dsabusterpackage
muslno-dsastretchpackage
muslno-dsajessiepackage

Примечания

  • https://git.musl-libc.org/cgit/musl/patch/?id=f3ed8bfe8a82af1870ddc8696ed4cc1d5aa6b441

  • https://git.musl-libc.org/cgit/musl/patch/?id=6818c31c9bc4bbad5357f1de14bedf781e5b349e

  • https://www.openwall.com/lists/oss-security/2019/08/06/1

EPSS

Процентиль: 52%
0.00288
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 6 лет назад

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

CVSS3: 9.8
nvd
больше 6 лет назад

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

CVSS3: 9.8
github
больше 3 лет назад

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

CVSS3: 9.8
fstec
больше 6 лет назад

Уязвимость директории math/i386/ библиотеки языка С для операционных систем на основе ядра операционных систем Linux Musl, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 52%
0.00288
Низкий