Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c5fh-wq58-2973

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

EPSS

Процентиль: 19%
0.00059
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

CVSS3: 4.3
nvd
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

CVSS3: 4.3
debian
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated a ...

CVSS3: 4.3
fstec
3 месяца назад

Уязвимость библиотеки захвата и декодирования VBI libzvbi, связанная с целочисленным переполнением в функции _vbi_strndup_iconv(), позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
3 месяца назад

Security update for zvbi

EPSS

Процентиль: 19%
0.00059
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3