Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpxx-wvjv-769j

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

EPSS

Процентиль: 13%
0.00044
Низкий

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
nvd
около 5 лет назад

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.

EPSS

Процентиль: 13%
0.00044
Низкий

Дефекты

CWE-125