Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8cvv-3p2p-xx9w

Опубликовано: 13 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.3
CVSS3: 9.8

Описание

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

EPSS

Процентиль: 74%
0.00852
Низкий

8.3 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-120
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

EPSS

Процентиль: 74%
0.00852
Низкий

8.3 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-120
CWE-787