Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2725

Опубликовано: 05 авг. 2010
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*
Версия до 1.6.1 (включая)
cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.2:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.3:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.4:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.4:rc1:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:rc1:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:rc2:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.015
Низкий

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 15 лет назад

BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

debian
больше 15 лет назад

BarnOwl before 1.6.2 does not check the return code of calls to the (1 ...

github
больше 3 лет назад

BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

EPSS

Процентиль: 81%
0.015
Низкий

7.5 High

CVSS2

Дефекты

CWE-20