Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g2hg-j8m2-ppxr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

EPSS

Процентиль: 64%
0.00466
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 5 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
nvd
больше 5 лет назад

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

CVSS3: 9.8
debian
больше 5 лет назад

A memory corruption vulnerability is present in bspatch as shipped in ...

EPSS

Процентиль: 64%
0.00466
Низкий

Дефекты

CWE-787