Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qcm5-23xv-7r79

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.

EPSS

Процентиль: 70%
0.00644
Низкий

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 6 лет назад

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.

CVSS3: 5.8
redhat
больше 6 лет назад

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.

CVSS3: 9.1
nvd
около 6 лет назад

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable.

CVSS3: 9.1
debian
около 6 лет назад

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a s ...

suse-cvrf
больше 5 лет назад

Security update for aspell

EPSS

Процентиль: 70%
0.00644
Низкий