CVE-2018-16665

Опубликовано: 07 сент. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 3.6

EPSS Низкий

Описание

An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c.

Ссылки

https://github.com/contiki-ng/contiki-ng/issues/598
Issue Tracking
Mitigation
Third Party Advisory
https://github.com/contiki-ng/contiki-ng/issues/598
Issue Tracking
Mitigation
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:contiki-ng:contiki-ng.:*:*:*:*:*:*:*:*

Версия до 4.1 (включая)

EPSS

Процентиль: 15%

0.00048

Низкий

6.1 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-pxf5-9h36-3g24