Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-19565

Опубликовано: 23 нояб. 2018
Источник: redhat
CVSS3: 4.4
EPSS Низкий

Описание

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5dcrawNot affected
Red Hat Enterprise Linux 6dcrawWill not fix
Red Hat Enterprise Linux 7dcrawFix deferred
Red Hat Enterprise Linux 8dcrawFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1656776dcraw: Buffer over-read in crop_masked_pixels resulting in denial of service or information leak

EPSS

Процентиль: 53%
0.00297
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 7 лет назад

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

CVSS3: 7.1
nvd
около 7 лет назад

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

CVSS3: 7.1
debian
около 7 лет назад

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could b ...

CVSS3: 7.1
github
больше 3 лет назад

A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.

suse-cvrf
больше 3 лет назад

Security update for dcraw

EPSS

Процентиль: 53%
0.00297
Низкий

4.4 Medium

CVSS3