Описание
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- ExploitMailing ListVendor Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- ExploitMailing ListVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.3.1 (включая)
cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00462
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 4.3
ubuntu
больше 4 лет назад
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS3: 2.5
redhat
больше 4 лет назад
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS3: 4.3
debian
больше 4 лет назад
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tr ...
EPSS
Процентиль: 63%
0.00462
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-125