exploitDog

CVE-2022-34295

Опубликовано: 23 июн. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

totd before 1.5.3 does not properly randomize mesg IDs.

Ссылки

http://www.hit.bme.hu/~lencse/publications/JCST-Apr14-2.pdf
Exploit
Technical Description
Third Party Advisory
https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399
Patch
Third Party Advisory
https://github.com/fwdillema/totd/releases/tag/1.5.3
Patch
Release Notes
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
Vendor Advisory
http://www.hit.bme.hu/~lencse/publications/JCST-Apr14-2.pdf
Exploit
Technical Description
Third Party Advisory
https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399
Patch
Third Party Advisory
https://github.com/fwdillema/totd/releases/tag/1.5.3
Patch
Release Notes
Third Party Advisory
https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:totd_project:totd:*:*:*:*:*:*:*:*

Версия до 1.5.3 (исключая)

EPSS

Процентиль: 58%

0.00365

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-330

Связанные уязвимости

GHSA-vp5q-q34g-8mcp

CVSS3: 6.5

github

больше 3 лет назад

totd before 1.5.3 does not properly randomize mesg IDs.

EPSS

Процентиль: 58%

0.00365

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-330