Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7hjr-xp4g-fx7m

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

EPSS

Процентиль: 83%
0.02266
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 9 лет назад

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

CVSS3: 9.8
nvd
больше 9 лет назад

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.

CVSS3: 9.8
debian
больше 9 лет назад

In wallpaper.c in feh before v2.18.3, if a malicious client pretends t ...

suse-cvrf
больше 9 лет назад

Security update for feh

CVSS3: 9.8
altlinux
около 6 лет назад

ALT-PU-2020-3072: package `feh` update to version 3.5-alt1

EPSS

Процентиль: 83%
0.02266
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787