Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-8975

Опубликовано: 25 мар. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:netpbm_project:netpbm:*:*:*:*:*:*:*:*
Версия до 10.81.03 (включая)

EPSS

Процентиль: 63%
0.00454
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.

CVSS3: 4.4
redhat
почти 8 лет назад

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.

CVSS3: 5.5
debian
почти 8 лет назад

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through ...

suse-cvrf
почти 7 лет назад

Security update for netpbm

suse-cvrf
почти 7 лет назад

Security update for netpbm

EPSS

Процентиль: 63%
0.00454
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125