CVE-2024-28563

Опубликовано: 20 мар. 2024

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::DwaCompressor::Classifier::Classifier() function when reading images in EXR format.

Ссылки

http://www.openwall.com/lists/oss-security/2024/04/11/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
Mailing List
Third Party Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
Mailing List
Third Party Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVE-2024-28563

CVSS3: 5.9

ubuntu

почти 2 года назад

CVE-2024-28563

CVSS3: 5.9

debian

почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909 ...

GHSA-vhg5-jp6p-2pcw

CVSS3: 5.9

github

почти 2 года назад

EPSS

Процентиль: 17%

0.00054

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-121