Описание
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | pngcrush | Will not fix |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1536198pngcrush: double-free in sPLT and png.c file
EPSS
Процентиль: 81%
0.02191
Низкий
3.3 Low
CVSS3
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 9 лет назад
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
CVSS3: 9.8
nvd
почти 9 лет назад
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
CVSS3: 9.8
debian
почти 9 лет назад
Double-free vulnerability in the sPLT chunk structure and png.c in png ...
CVSS3: 9.8
github
больше 4 лет назад
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
EPSS
Процентиль: 81%
0.02191
Низкий
3.3 Low
CVSS3