CVE-2021-28874

Опубликовано: 06 апр. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file.

Ссылки

https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3
Third Party Advisory
https://github.com/SerenityOS/serenity/issues/5769
Third Party Advisory
https://github.com/SerenityOS/serenity/pull/5802
Third Party Advisory
https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3
Third Party Advisory
https://github.com/SerenityOS/serenity/issues/5769
Third Party Advisory
https://github.com/SerenityOS/serenity/pull/5802
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:serenityos:serenityos:*:*:*:*:*:*:*:*

Версия до 2021-03-15 (исключая)

EPSS

Процентиль: 51%

0.00284

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-m6mw-8fj4-7fh4