Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-36332

Опубликовано: 21 мая 2021
Источник: debian
EPSS Низкий

Описание

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libwebpfixed0.6.1-2.1package
libwebpignoredstretchpackage

Примечания

  • https://bugs.chromium.org/p/webp/issues/detail?id=391

  • https://chromium.googlesource.com/webm/libwebp/+/39cb9aad85ca7bb1d193013460db1f8cc6bff109

EPSS

Процентиль: 46%
0.00233
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 4 лет назад

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

CVSS3: 7.5
redhat
больше 5 лет назад

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

CVSS3: 7.5
nvd
около 4 лет назад

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

CVSS3: 7.5
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 7.5
github
около 3 лет назад

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

EPSS

Процентиль: 46%
0.00233
Низкий