Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crq5-4m3r-9jx2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

EPSS

Процентиль: 82%
0.01655
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 7.5
redhat
около 6 лет назад

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 6.5
nvd
больше 5 лет назад

Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.

CVSS3: 6.5
debian
больше 5 лет назад

Heap-based buffer overflow in archive_string_append_from_wcs() (archiv ...

EPSS

Процентиль: 82%
0.01655
Низкий

Дефекты

CWE-787