CVE-2024-28564

Опубликовано: 20 мар. 2024

Источник: nvd

CVSS3: 6.2

EPSS Низкий

Описание

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the Imf_2_2::CharPtrIO::readChars() function when reading images in EXR format.

Ссылки

http://www.openwall.com/lists/oss-security/2024/04/11/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
Mailing List
Third Party Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/11/3
Mailing List
Third Party Advisory
https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freeimage_project:freeimage:3.19.0:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00043

Низкий

6.2 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2024-28564

CVSS3: 6.2

ubuntu

почти 2 года назад

CVE-2024-28564

CVSS3: 6.2

debian

почти 2 года назад

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909 ...

GHSA-fhff-594f-mqr9

CVSS3: 6.2

github

почти 2 года назад

EPSS

Процентиль: 13%

0.00043

Низкий

6.2 Medium

CVSS3

Дефекты

CWE-120