Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h6vj-vg8j-jfqp

Опубликовано: 18 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 66%
0.01234
Низкий

3.5 Low

CVSS3

Дефекты

CWE-404

Связанные уязвимости

CVSS3: 3.5
ubuntu
около 3 лет назад

A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 3.5
nvd
около 3 лет назад

A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 3.5
debian
около 3 лет назад

A vulnerability was found in GNU cflow 1.7. It has been rated as probl ...

CVSS3: 7.5
fstec
около 3 лет назад

Уязвимость анализатора потока управления для исходных файлов C Cflow, связанная с некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
redos
4 месяца назад

Уязвимость cflow

EPSS

Процентиль: 66%
0.01234
Низкий

3.5 Low

CVSS3

Дефекты

CWE-404