Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hcvj-rqwj-4h7f

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

** DISPUTED ** The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub.

** DISPUTED ** The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub.

EPSS

Процентиль: 28%
0.00341
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 8 лет назад

The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub

CVSS3: 5.5
nvd
больше 8 лет назад

The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub

CVSS3: 5.5
debian
больше 8 лет назад

The libevt_record_values_read_event() function in libevt_record_values ...

CVSS3: 5.5
altlinux
около 1 месяца назад

ALT-PU-2026-16242: package `libevt` update to version 20260705-alt2

CVSS3: 5.5
altlinux
почти 6 лет назад

ALT-PU-2021-1125: package `libevt` update to version 20140411-alt2

EPSS

Процентиль: 28%
0.00341
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-125