CVE-2022-32325

Опубликовано: 01 июл. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

Ссылки

https://github.com/tjko/jpegoptim/issues/107
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY/
https://github.com/tjko/jpegoptim/issues/107
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XRPXTW3IARYQVKZBPIPIEKABN7DSS5XY/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jpegoptim_project:jpegoptim:1.4.7:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00991

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2022-32325

CVSS3: 6.5

ubuntu

больше 4 лет назад

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

CVE-2022-32325

CVSS3: 6.5

debian

больше 4 лет назад

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation wh ...

GHSA-4m45-43xg-8rr7

CVSS3: 6.5

github

больше 4 лет назад

JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.

ALT-PU-2022-2654

CVSS3: 6.5

altlinux

около 4 лет назад

ALT-PU-2022-2654: package `jpegoptim` update to version 1.5.0-alt1

EPSS

Процентиль: 63%

0.00991

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125