Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjgv-c5xv-9h9v

Опубликовано: 22 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.

EPSS

Процентиль: 22%
0.00298
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.

CVSS3: 7.8
nvd
почти 3 года назад

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.

msrc
11 месяцев назад

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.

CVSS3: 7.8
debian
почти 3 года назад

p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerabi ...

CVSS3: 7.8
fstec
больше 3 лет назад

Уязвимость функции NArchive::NZip::CInArchive::FindCd(bool) архиватора p7zip, позвояющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 22%
0.00298
Низкий

7.8 High

CVSS3

Дефекты

CWE-787