CVE-2018-20349

Опубликовано: 22 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:igraph:igraph:*:*:*:*:*:*:*:*

Версия до 0.7.1 (включая)

EPSS

Процентиль: 57%

0.00342

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-20349

CVSS3: 6.5

ubuntu

около 7 лет назад

The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.

CVE-2018-20349

CVSS3: 6.5

debian

около 7 лет назад

The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 ...

GHSA-qgqh-phj7-7fm4

CVSS3: 6.5

github

больше 3 лет назад

The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.

EPSS

Процентиль: 57%

0.00342

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476