CVE-2022-23319

Опубликовано: 17 фев. 2022

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.

Ссылки

https://github.com/ganaware/pcf2bdf
Third Party Advisory
https://github.com/ganaware/pcf2bdf/issues/5
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/ganaware/pcf2bdf
Third Party Advisory
https://github.com/ganaware/pcf2bdf/issues/5
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pcf2bdf_project:pcf2bdf:1.04:*:*:*:*:*:*:*

cpe:2.3:a:pcf2bdf_project:pcf2bdf:1.05:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00138

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1284

Связанные уязвимости

CVE-2022-23319

CVSS3: 5.5

ubuntu

почти 4 года назад

CVE-2022-23319

CVSS3: 5.5

debian

почти 4 года назад

A segmentation fault during PCF file parsing in pcf2bdf versions >=1.0 ...

GHSA-p4gv-mjgc-3g68

CVSS3: 5.5

github

почти 4 года назад

EPSS

Процентиль: 34%

0.00138

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1284