Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-6499

Опубликовано: 23 июн. 2025
Источник: nvd
CVSS3: 3.3
CVSS3: 5.5
CVSS2: 1.7
EPSS Низкий

Описание

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_parse_multiline_string of the file src/ucl_parser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vstakhov:libucl:*:*:*:*:*:*:*:*
Версия до 0.9.2 (включая)

EPSS

Процентиль: 10%
0.00034
Низкий

3.3 Low

CVSS3

5.5 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 3.3
debian
8 месяцев назад

A vulnerability classified as problematic was found in vstakhov libucl ...

CVSS3: 3.3
github
8 месяцев назад

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_parse_multiline_string of the file src/ucl_parser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 10%
0.00034
Низкий

3.3 Low

CVSS3

5.5 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-119
CWE-787