Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-10672

Опубликовано: 27 июн. 2017
Источник: redhat
CVSS3: 5.6
EPSS Средний

Описание

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Отчет

Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5perl-XML-LibXMLWill not fix
Red Hat Enterprise Linux 6perl-XML-LibXMLWill not fix
Red Hat Enterprise Linux 7perl-XML-LibXMLWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1470204perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call

EPSS

Процентиль: 94%
0.12353
Средний

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVSS3: 9.8
nvd
больше 8 лет назад

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVSS3: 9.8
debian
больше 8 лет назад

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows ...

suse-cvrf
около 8 лет назад

Security update for perl-XML-LibXML

suse-cvrf
около 8 лет назад

Security update for perl-XML-LibXML

EPSS

Процентиль: 94%
0.12353
Средний

5.6 Medium

CVSS3