Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-45920

Опубликовано: 27 мар. 2024
Источник: debian
EPSS Низкий

Описание

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xfigfixed1:3.2.9-1package

Примечания

  • https://sourceforge.net/p/mcj/tickets/155/

  • https://sourceforge.net/p/mcj/xfig/ci/ec49cde00dbd6f7f45d8e386795079d5d636496f/

  • Crash in CLI tool, no security impact

EPSS

Процентиль: 14%
0.00228
Низкий

Связанные уязвимости

CVSS3: 4.2
ubuntu
больше 2 лет назад

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

CVSS3: 4.2
nvd
больше 2 лет назад

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

suse-cvrf
больше 2 лет назад

Security update for xfig

CVSS3: 4.2
github
больше 2 лет назад

Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.

CVSS3: 4.2
altlinux
около 5 лет назад

ALT-PU-2021-4970: package `xfig` update to version 3.2.8b-alt1

EPSS

Процентиль: 14%
0.00228
Низкий