Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hmq5-vc89-4m9m

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 33%
0.0013
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-456
CWE-909

Связанные уязвимости

CVSS3: 6.3
ubuntu
около 4 лет назад

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 6.3
nvd
около 4 лет назад

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 6.3
debian
около 4 лет назад

An information disclosure vulnerability exists in the pick-and-place r ...

EPSS

Процентиль: 33%
0.0013
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-456
CWE-909