Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g2hg-j8m2-ppxr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

EPSS

Процентиль: 85%
0.02603
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
nvd
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
debian
около 6 лет назад

A memory corruption vulnerability is present in bspatch as shipped in ...

CVSS3: 9.8
altlinux
4 месяца назад

ALT-PU-2026-11164: package `bsdiff` update to version 4.3-alt3

CVSS3: 9.8
altlinux
4 месяца назад

ALT-PU-2026-11037: package `bsdiff` update to version 4.3-alt3

EPSS

Процентиль: 85%
0.02603
Низкий

Дефекты

CWE-787