CVE-2018-14046

Опубликовано: 13 июл. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

Ссылки

https://access.redhat.com/errata/RHSA-2019:2101
https://github.com/Exiv2/exiv2/issues/378
Exploit
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2101
https://github.com/Exiv2/exiv2/issues/378
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00396

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2018-14046

CVSS3: 8.8

ubuntu

около 7 лет назад

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

CVE-2018-14046

CVSS3: 3.3

redhat

около 7 лет назад

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

CVE-2018-14046

CVSS3: 8.8

debian

около 7 лет назад

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunk ...

GHSA-48r6-v3wx-gxm5

CVSS3: 8.8

github

около 3 лет назад

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

ELSA-2019-2101

oracle-oval

почти 6 лет назад

ELSA-2019-2101: exiv2 security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 60%

0.00396

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125