Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-20387

Опубликовано: 21 янв. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:opensuse:libsolv:*:*:*:*:*:*:*:*
Версия до 0.7.6 (исключая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 46%
0.0023
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

CVSS3: 7.5
redhat
около 6 лет назад

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

CVSS3: 7.5
debian
около 6 лет назад

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-ba ...

CVSS3: 7.5
github
больше 3 лет назад

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

oracle-oval
около 5 лет назад

ELSA-2020-4508: libsolv security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 46%
0.0023
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125