CVE-2015-8366

Опубликовано: 30 нояб. 2015

Источник: redhat

CVSS2: 5.8

EPSS Низкий

Описание

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	dcraw	Will not fix
Red Hat Enterprise Linux 6	dcraw	Will not fix
Red Hat Enterprise Linux 7	dcraw	Will not fix
Red Hat Enterprise Linux 7	LibRaw	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-190

https://bugzilla.redhat.com/show_bug.cgi?id=1287056LibRaw: Index overflow in smal_decode_segment

EPSS

Процентиль: 79%

0.01277

Низкий

5.8 Medium

CVSS2

Связанные уязвимости

CVE-2015-8366

CVSS3: 9.8

ubuntu

около 6 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVE-2015-8366

CVSS3: 9.8

nvd

около 6 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

CVE-2015-8366

CVSS3: 9.8

debian

около 6 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.1 ...

GHSA-7798-4jq3-cmj5

CVSS3: 9.8

github

больше 3 лет назад

Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes.

EPSS

Процентиль: 79%

0.01277

Низкий

5.8 Medium

CVSS2