Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhhp-8cc7-vf7w

Опубликовано: 21 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.

EPSS

Процентиль: 71%
0.00679
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-1284
CWE-787

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service.

EPSS

Процентиль: 71%
0.00679
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-1284
CWE-787