CVE-2021-38479

Опубликовано: 22 окт. 2021

Источник: nvd

CVSS3: 6.5

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
Patch
Third Party Advisory
US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
Patch
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:auvesy:versiondog:*:*:*:*:*:*:*:*

Версия до 8.0.0 (исключая)

EPSS

Процентиль: 38%

0.00165

Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-27q3-p62g-44fr

github

около 3 лет назад

EPSS

Процентиль: 38%

0.00165

Низкий

6.5 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787