CVE-2017-15874

Опубликовано: 24 окт. 2017

Источник: nvd

CVSS3: 5.5

CVSS3: 5

CVSS2: 4.3

EPSS Низкий

Описание

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

Ссылки

https://bugs.busybox.net/show_bug.cgi?id=10436
Exploit
Issue Tracking
Patch
Vendor Advisory
https://bugs.busybox.net/show_bug.cgi?id=10436
Exploit
Issue Tracking
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.0028

Низкий

5.5 Medium

CVSS3

5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2017-15874

CVSS3: 5

ubuntu

больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

CVE-2017-15874

CVSS3: 3.3

redhat

больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

CVE-2017-15874

CVSS3: 5

debian

больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integ ...

GHSA-hpwq-frgc-5pqj

CVSS3: 5.5

github

больше 3 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

openSUSE-SU-2022:0135-1

suse-cvrf

около 4 лет назад

Security update for busybox

EPSS

Процентиль: 51%

0.0028

Низкий

5.5 Medium

CVSS3

5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-191