Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wpqm-56h6-gcww

Опубликовано: 28 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 8.4

Описание

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.

EPSS

Процентиль: 7%
0.00177
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.4
ubuntu
5 месяцев назад

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.

CVSS3: 8.4
nvd
5 месяцев назад

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.

CVSS3: 8.4
debian
5 месяцев назад

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability th ...

EPSS

Процентиль: 7%
0.00177
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-787