Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4pxg-g29h-qqfc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

EPSS

Процентиль: 75%
0.00889
Низкий

7.8 High

CVSS3

Дефекты

CWE-415
CWE-416

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 5 лет назад

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

CVSS3: 7.8
nvd
почти 5 лет назад

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file.

CVSS3: 7.8
debian
почти 5 лет назад

In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows ...

EPSS

Процентиль: 75%
0.00889
Низкий

7.8 High

CVSS3

Дефекты

CWE-415
CWE-416