Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r93j-wmmw-g27p

Опубликовано: 26 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

EPSS

Процентиль: 54%
0.00819
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-401

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 4 года назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
redhat
почти 4 года назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
nvd
почти 4 года назад

There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
msrc
почти 4 года назад

There are two Information Disclosure vulnerabilities in colord and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use while libxml2 emphasizes that the caller needs to release it.

CVSS3: 7.5
debian
почти 4 года назад

There are two Information Disclosure vulnerabilities in colord, and th ...

EPSS

Процентиль: 54%
0.00819
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
CWE-401