Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2r56-6h49-5c5r

Опубликовано: 01 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 2.5

Описание

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

EPSS

Процентиль: 4%
0.00141
Низкий

2.5 Low

CVSS3

Дефекты

CWE-131

Связанные уязвимости

CVSS3: 2.5
ubuntu
20 дней назад

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

CVSS3: 2.5
redhat
около 2 месяцев назад

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

CVSS3: 2.5
nvd
20 дней назад

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

msrc
19 дней назад

Popt-devel: popt-static: short realloc in poptconfigfiletostring

CVSS3: 2.5
debian
20 дней назад

A flaw was found in popt. This vulnerability allows an attacker to pro ...

EPSS

Процентиль: 4%
0.00141
Низкий

2.5 Low

CVSS3

Дефекты

CWE-131