Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r93j-wmmw-g27p

Опубликовано: 26 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

EPSS

Процентиль: 32%
0.00126
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-401

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
redhat
больше 3 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
nvd
больше 3 лет назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
msrc
больше 3 лет назад

There are two Information Disclosure vulnerabilities in colord and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
debian
больше 3 лет назад

There are two Information Disclosure vulnerabilities in colord, and th ...

EPSS

Процентиль: 32%
0.00126
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-401