CVE-2018-16742

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.

Ссылки

https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Exploit
Third Party Advisory
https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mgetty_project:mgetty:*:*:*:*:*:*:*:*

Версия до 1.2.1 (исключая)

EPSS

Процентиль: 20%

0.00063

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-16742

CVSS3: 7.8

ubuntu

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.

CVE-2018-16742

CVSS3: 2.9

redhat

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.

CVE-2018-16742

CVSS3: 7.8

debian

больше 7 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a ...

GHSA-4qch-qm87-8j72

CVSS3: 7.8

github

больше 3 лет назад

An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.

openSUSE-SU-2018:3108-1

suse-cvrf

больше 7 лет назад

Security update for mgetty

EPSS

Процентиль: 20%

0.00063

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787