CVE-2010-5325

Опубликовано: 15 апр. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

Ссылки

http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-0491.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/15/1
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/15/7
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
Third Party Advisory
https://bugs.linuxfoundation.org/show_bug.cgi?id=515
https://bugzilla.redhat.com/show_bug.cgi?id=1218297
Issue Tracking
http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-0491.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/15/1
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/02/15/7
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
Third Party Advisory
https://bugs.linuxfoundation.org/show_bug.cgi?id=515
https://bugzilla.redhat.com/show_bug.cgi?id=1218297
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7.z:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:linuxfoundation:foomatic-filters:*:*:*:*:*:*:*:*

Версия до 4.0.5 (включая)

Конфигурация 3

cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05963

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2010-5325

CVSS3: 9.8

ubuntu

больше 9 лет назад

CVE-2010-5325

redhat

больше 10 лет назад

CVE-2010-5325

CVSS3: 9.8

debian

больше 9 лет назад

Heap-based buffer overflow in the unhtmlify function in foomatic-rip i ...

GHSA-f3f5-3w2j-q3qx

CVSS3: 9.8

github

больше 3 лет назад

ELSA-2016-0491

oracle-oval

больше 9 лет назад

ELSA-2016-0491: foomatic security update (MODERATE)

EPSS

Процентиль: 90%

0.05963

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119