CVE-2020-22617

Опубликовано: 08 окт. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

Ссылки

https://github.com/Ardour/ardour/commit/96daa4036a
Patch
Third Party Advisory
https://tracker.ardour.org/view.php?id=7926
Vendor Advisory
https://github.com/Ardour/ardour/commit/96daa4036a
Patch
Third Party Advisory
https://tracker.ardour.org/view.php?id=7926
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ardour:ardour:5.12:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.01289

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2020-22617

CVSS3: 9.8

ubuntu

около 5 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

CVE-2020-22617

CVSS3: 9.8

debian

около 5 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ...

GHSA-595v-6p68-9v59

github

больше 4 лет назад

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

ALT-PU-2020-2035

CVSS3: 9.8

altlinux

больше 6 лет назад

ALT-PU-2020-2035: package `ardour` update to version 6.0-alt1

EPSS

Процентиль: 70%

0.01289

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-416