Описание
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
Ссылки
- Patch
- PatchVendor Advisory
- Patch
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:facebook:netconsd:0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06815
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
EPSS
Процентиль: 91%
0.06815
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787