CVE-2019-14383

Опубликовано: 30 июл. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html
Mailing List
Third Party Advisory
https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/
Patch
Release Notes
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html
Mailing List
Third Party Advisory
https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/
Patch
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openmpt:libopenmpt:*:*:*:*:*:*:*:*

Версия до 0.4.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.0044

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVE-2019-14383

CVSS3: 6.5

ubuntu

больше 6 лет назад

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

CVE-2019-14383

CVSS3: 6.5

debian

больше 6 лет назад

J2B in libopenmpt before 0.4.2 allows an assertion failure during file ...

GHSA-96v6-rmpc-r36j

CVSS3: 6.5

github

больше 3 лет назад

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

openSUSE-SU-2019:2213-1

suse-cvrf

больше 6 лет назад

Security update for libopenmpt

openSUSE-SU-2019:2212-1

suse-cvrf

больше 6 лет назад

Security update for libopenmpt

EPSS

Процентиль: 63%

0.0044

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-617