CVE-2019-13455

Опубликовано: 27 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of expansion in acknowledge.c.

Ссылки

https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/acknowledge.c
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html
Mailing List
Third Party Advisory
https://lists.xymon.com/archive/2019-July/046570.html
Exploit
Mailing List
Vendor Advisory
https://github.com/svn2github/xymon/blob/master/branches/4.3.28/web/acknowledge.c
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00032.html
Mailing List
Third Party Advisory
https://lists.xymon.com/archive/2019-July/046570.html
Exploit
Mailing List
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xymon:xymon:*:*:*:*:*:*:*:*

Версия до 4.3.28 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01049

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-13455

CVSS3: 9.8

ubuntu

почти 6 лет назад

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of   expansion in acknowledge.c.

CVE-2019-13455

CVSS3: 9.8

debian

почти 6 лет назад

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability e ...

GHSA-xx94-f2ch-qhxm

github

около 3 лет назад

In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of   expansion in acknowledge.c.

EPSS

Процентиль: 77%

0.01049

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787