CVE-2023-49287

Опубликовано: 04 дек. 2023

Источник: nvd

CVSS3: 7.7

CVSS3: 9.8

EPSS Низкий

Описание

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydir_file_open() function. This vulnerability has been patched in version 1.2.6.

Ссылки

http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/14
http://www.openwall.com/lists/oss-security/2023/12/04/1
Mailing List
Third Party Advisory
https://github.com/cxong/tinydir/releases/tag/1.2.6
Release Notes
https://github.com/cxong/tinydir/security/advisories/GHSA-jf5r-wgf4-qhxf
Exploit
Vendor Advisory
http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/14
http://www.openwall.com/lists/oss-security/2023/12/04/1
Mailing List
Third Party Advisory
https://github.com/cxong/tinydir/releases/tag/1.2.6
Release Notes
https://github.com/cxong/tinydir/security/advisories/GHSA-jf5r-wgf4-qhxf
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cxong:tinydir:*:*:*:*:*:*:*:*

Версия до 1.2.6 (исключая)

EPSS

Процентиль: 85%

0.02487

Низкий

7.7 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2023-49287

CVSS3: 7.7

ubuntu

около 2 лет назад

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.

CVE-2023-49287

CVSS3: 7.7

debian

около 2 лет назад

TinyDir is a lightweight C directory and file reader. Buffer overflows ...

BDU:2023-09010

CVSS3: 9.8

fstec

около 2 лет назад

Уязвимость функции tinydir_file_open() программного средства чтения файлов TinyDir, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%

0.02487

Низкий

7.7 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-120