Описание
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
Ссылки
- Issue TrackingPatch
- PatchVendor Advisory
- Third Party Advisory
- Issue TrackingPatch
- PatchVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.15 (включая)
cpe:2.3:a:unbit:uwsgi:*:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.02047
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 9 лет назад
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
CVSS3: 9.8
debian
почти 9 лет назад
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through ...
CVSS3: 9.8
github
больше 4 лет назад
The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.
CVSS3: 9.8
altlinux
почти 7 лет назад
ALT-PU-2019-3150: package `uwsgi` update to version 2.0.18-alt1
EPSS
Процентиль: 81%
0.02047
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-787