Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vfcx-wcgr-9vc5

Опубликовано: 05 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Do not free stack buffer

RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Do not free stack buffer

RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

EPSS

Процентиль: 10%
0.00195
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

CVSS3: 4.4
redhat
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

CVSS3: 7.8
nvd
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Do not free stack buffer RSA text data uses variable length buffer allocated in software stack. Calling kfree on it causes undefined behaviour in subsequent operations.

msrc
12 месяцев назад

crypto: starfive - Do not free stack buffer

CVSS3: 7.8
debian
около 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: c ...

EPSS

Процентиль: 10%
0.00195
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-770