Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcrp-2wmj-jrg8

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

EPSS

Процентиль: 61%
0.00414
Низкий

8.1 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 7 лет назад

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

CVSS3: 3.3
redhat
около 7 лет назад

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

CVSS3: 8.1
nvd
около 7 лет назад

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

CVSS3: 8.1
debian
около 7 лет назад

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realp ...

rocky
больше 5 лет назад

Moderate: exiv2 security, bug fix, and enhancement update

EPSS

Процентиль: 61%
0.00414
Низкий

8.1 High

CVSS3

Дефекты

CWE-119