CVE-2018-19565

Опубликовано: 26 нояб. 2018

Источник: nvd

CVSS3: 7.1

CVSS2: 5.8

EPSS Низкий

Описание

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

Ссылки

https://seclists.org/oss-sec/2018/q4/165
Mailing List
Third Party Advisory
https://seclists.org/oss-sec/2018/q4/171
Mailing List
Third Party Advisory
https://seclists.org/oss-sec/2018/q4/165
Mailing List
Third Party Advisory
https://seclists.org/oss-sec/2018/q4/171
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dcraw_project:dcraw:*:*:*:*:*:*:*:*

Версия до 9.28 (включая)

EPSS

Процентиль: 53%

0.00297

Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2018-19565

CVSS3: 7.1

ubuntu

около 7 лет назад

CVE-2018-19565

CVSS3: 4.4

redhat

около 7 лет назад

CVE-2018-19565

CVSS3: 7.1

debian

около 7 лет назад

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could b ...

GHSA-682q-f6x6-8x24

CVSS3: 7.1

github

больше 3 лет назад

SUSE-SU-2022:1749-1

suse-cvrf

больше 3 лет назад

Security update for dcraw

EPSS

Процентиль: 53%

0.00297

Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-125