CVE-2020-26148

Опубликовано: 30 сент. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.

Ссылки

https://github.com/mity/md4c/issues/130
Exploit
Patch
Third Party Advisory
https://github.com/mity/md4c/issues/130
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:md4c_project:md4c:0.4.5:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00362

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-908

Связанные уязвимости

CVE-2020-26148

CVSS3: 7.5

ubuntu

больше 5 лет назад

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.

CVE-2020-26148

CVSS3: 7.5

debian

больше 5 лет назад

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigge ...

GHSA-8cq8-p477-7hrv

github

больше 3 лет назад

md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.

EPSS

Процентиль: 58%

0.00362

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-908