Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-28591

Опубликовано: 03 мар. 2021
Источник: nvd
CVSS3: 8.6
CVSS3: 6.5
CVSS2: 4.3
EPSS Низкий

Описание

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:slic3r:libslic3r:1.3.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 55%
0.00324
Низкий

8.6 High

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20
CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 6.5
debian
почти 5 лет назад

An out-of-bounds read vulnerability exists in the AMF File AMFParserCo ...

CVSS3: 6.5
github
больше 3 лет назад

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 55%
0.00324
Низкий

8.6 High

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20
CWE-125