Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-43898

Опубликовано: 03 окт. 2023
Источник: debian

Описание

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libstbunfixedpackage
libstbno-dsatrixiepackage
libstbno-dsabookwormpackage
libstbno-dsabullseyepackage
libstbpostponedbusterpackage

Примечания

  • https://github.com/nothings/stb/issues/1452

  • Proposed fixes: https://github.com/nothings/stb/pull/1454

  • https://github.com/nothings/stb/issues/1521

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 3 года назад

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

CVSS3: 5.5
nvd
почти 3 года назад

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

CVSS3: 5.5
github
почти 3 года назад

Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.

CVSS3: 5.5
fstec
больше 3 лет назад

Уязвимость функции stbi__convert_format библиотек для C/C++ Libstb, позволяющая нарушителю вызвать отказ в обслуживании