CVE-2020-22617

Опубликовано: 08 окт. 2021

Источник: debian

EPSS Низкий

Описание

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

Пакет	Статус	Версия исправления	Релиз	Тип
ardour	fixed	1:6.0.0~ds0-1		package
ardour	no-dsa		buster	package
ardour	no-dsa		stretch	package

https://tracker.ardour.org/view.php?id=7926
https://github.com/Ardour/ardour/commit/96daa4036a425ff3f23a7dfcba57bfb0f942bec6 (6.0-pre1)

EPSS

Процентиль: 70%

0.01289

Низкий

CVE-2020-22617

CVSS3: 9.8

ubuntu

около 5 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

CVE-2020-22617

CVSS3: 9.8

nvd

около 5 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

GHSA-595v-6p68-9v59

github

больше 4 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

ALT-PU-2020-2035

CVSS3: 9.8

altlinux

больше 6 лет назад

ALT-PU-2020-2035: package `ardour` update to version 6.0-alt1

EPSS

Процентиль: 70%

0.01289

Низкий