CVE-2019-14274

Опубликовано: 26 июл. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202208-04
Third Party Advisory
https://sourceforge.net/p/mcpp/bugs/13/
Exploit
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202208-04
Third Party Advisory
https://sourceforge.net/p/mcpp/bugs/13/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mcpp_project:mcpp:2.7.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00165

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-14274

CVSS3: 5.5

ubuntu

около 6 лет назад

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

CVE-2019-14274

CVSS3: 5.3

redhat

около 6 лет назад

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

CVE-2019-14274

CVSS3: 5.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2019-14274

CVSS3: 5.5

debian

около 6 лет назад

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function i ...

openSUSE-SU-2020:0382-1

suse-cvrf

больше 5 лет назад

Security update for mcpp

EPSS

Процентиль: 38%

0.00165

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787