Описание
The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.12 (включая)
cpe:2.3:a:potrace_project:potrace:*:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.01389
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 10 лет назад
The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
CVSS3: 5.5
debian
почти 10 лет назад
The findnext function in decompose.c in potrace 1.13 allows remote att ...
CVSS3: 5.5
github
больше 4 лет назад
The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.
CVSS3: 7.8
altlinux
больше 9 лет назад
ALT-PU-2017-1196: package `potrace` update to version 1.14-alt1
EPSS
Процентиль: 72%
0.01389
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-119