CVE-2016-7544

Опубликовано: 30 янв. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.

Ссылки

http://www.openwall.com/lists/oss-security/2016/09/23/5
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93164
Third Party Advisory
VDB Entry
https://github.com/weidai11/cryptopp/issues/302
Issue Tracking
Patch
Third Party Advisory
https://www.cryptopp.com/release565.html
Release Notes
Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/5
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93164
Third Party Advisory
VDB Entry
https://github.com/weidai11/cryptopp/issues/302
Issue Tracking
Patch
Third Party Advisory
https://www.cryptopp.com/release565.html
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:cryptopp:crypto\+\+:5.6.4:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03271

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2016-7544

CVSS3: 7.5

ubuntu

около 9 лет назад

CVE-2016-7544

CVSS3: 7.5

debian

около 9 лет назад

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _ ...

GHSA-3wp6-w2rj-8433

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 87%

0.03271

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-399