CVE-2018-20820

Опубликовано: 23 апр. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.

Ссылки

https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
Patch
Third Party Advisory
https://github.com/dropbox/lepton/issues/111
Exploit
Patch
Third Party Advisory
https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761
Patch
Third Party Advisory
https://github.com/dropbox/lepton/issues/111
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dropbox:lepton:1.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00286

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2018-20820

CVSS3: 5.5

ubuntu

почти 7 лет назад

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.

CVE-2018-20820

CVSS3: 5.5

debian

почти 7 лет назад

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to c ...

GHSA-h3mv-4m2h-gvch

CVSS3: 5.5

github

больше 3 лет назад

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.

EPSS

Процентиль: 52%

0.00286

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190