Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h32h-58mq-6fgc

Опубликовано: 16 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 80%
0.01368
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 80%
0.01368
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787