exploitDog

CVE-2018-25027

Опубликовано: 27 дек. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free.

Ссылки

https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
Third Party Advisory
US Government Resource
https://rustsec.org/advisories/RUSTSEC-2018-0021.html
Third Party Advisory
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
Third Party Advisory
US Government Resource
https://rustsec.org/advisories/RUSTSEC-2018-0021.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libpulse-binding_project:libpulse-binding:*:*:*:*:*:rust:*:*

Версия до 1.2.1 (исключая)

EPSS

Процентиль: 61%

0.00414

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

GHSA-hxjf-h2mh-r6hj

CVSS3: 7.5

github

около 4 лет назад

Use After Free in libpulse-binding

EPSS

Процентиль: 61%

0.00414

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-416