CVE-2020-24889

Опубликовано: 16 сент. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 5.1

EPSS Низкий

Описание

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

Ссылки

https://github.com/LibRaw/LibRaw/issues/334
Exploit
Issue Tracking
Third Party Advisory
https://security.gentoo.org/glsa/202010-05
Third Party Advisory
https://github.com/LibRaw/LibRaw/issues/334
Exploit
Issue Tracking
Third Party Advisory
https://security.gentoo.org/glsa/202010-05
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*

Версия до 0.20.0 (исключая)

EPSS

Процентиль: 76%

0.00931

Низкий

7.8 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2020-24889

CVSS3: 7.8

ubuntu

больше 5 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

CVE-2020-24889

CVSS3: 5.3

redhat

больше 5 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

CVE-2020-24889

CVSS3: 7.8

debian

больше 5 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNo ...

GHSA-8977-8gpx-7fcv

CVSS3: 7.8

github

больше 3 лет назад

A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.

EPSS

Процентиль: 76%

0.00931

Низкий

7.8 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-120