Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wfp6-c53g-9x25

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

EPSS

Процентиль: 81%
0.01461
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 7 лет назад

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

CVSS3: 3.3
redhat
больше 7 лет назад

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

CVSS3: 4.3
nvd
больше 7 лет назад

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

CVSS3: 4.3
debian
больше 7 лет назад

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accept ...

suse-cvrf
почти 7 лет назад

Security update for libmspack

EPSS

Процентиль: 81%
0.01461
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476