Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5h66-v34j-rg64

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

EPSS

Процентиль: 97%
0.40679
Средний

8.6 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 10 лет назад

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

redhat
около 10 лет назад

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

CVSS3: 8.6
nvd
около 10 лет назад

Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read.

CVSS3: 8.6
debian
около 10 лет назад

Integer overflow in the read_string function in libsvn_ra_svn/marshal. ...

EPSS

Процентиль: 97%
0.40679
Средний

8.6 High

CVSS3

Дефекты

CWE-119