CVE-2021-35331

Опубликовано: 05 июл. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

Ссылки

https://core.tcl-lang.org/tcl/info/28ef6c0c741408a2
Exploit
Patch
Vendor Advisory
https://core.tcl-lang.org/tcl/info/bad6cc213dfe8280
Exploit
Vendor Advisory
https://github.com/tcltk/tcl/commit/4705dbdde2f32ff90420765cd93e7ac71d81a222
Patch
Third Party Advisory
https://sqlite.org/forum/info/7dcd751996c93ec9
Exploit
Third Party Advisory
https://core.tcl-lang.org/tcl/info/28ef6c0c741408a2
Exploit
Patch
Vendor Advisory
https://core.tcl-lang.org/tcl/info/bad6cc213dfe8280
Exploit
Vendor Advisory
https://github.com/tcltk/tcl/commit/4705dbdde2f32ff90420765cd93e7ac71d81a222
Patch
Third Party Advisory
https://sqlite.org/forum/info/7dcd751996c93ec9
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tcl:tcl:8.6.11:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.0029

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-134

Связанные уязвимости

CVE-2021-35331

CVSS3: 7.8

ubuntu

больше 4 лет назад

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

CVE-2021-35331

CVSS3: 7.8

debian

больше 4 лет назад

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow ...

SUSE-FU-2022:0868-1

suse-cvrf

почти 4 года назад

Feature update for tcl and tk

SUSE-FU-2022:0484-1

suse-cvrf

почти 4 года назад

Feature update for tcl and tk

GHSA-539q-24vg-qfm4

CVSS3: 7.8

github

больше 3 лет назад

** DISPUTED ** In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crated file. NOTE: multiple third parties dispute the significance of this finding.

EPSS

Процентиль: 52%

0.0029

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-134