Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-2175

Опубликовано: 11 мар. 2025
Источник: nvd
CVSS3: 4.3
CVSS2: 5
EPSS Низкий

Описание

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

EPSS

Процентиль: 19%
0.00059
Низкий

4.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

CVSS3: 4.3
debian
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated a ...

CVSS3: 4.3
github
3 месяца назад

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

CVSS3: 4.3
fstec
3 месяца назад

Уязвимость библиотеки захвата и декодирования VBI libzvbi, связанная с целочисленным переполнением в функции _vbi_strndup_iconv(), позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
3 месяца назад

Security update for zvbi

EPSS

Процентиль: 19%
0.00059
Низкий

4.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-189