Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-3848

Опубликовано: 10 мар. 2018
Источник: redhat
CVSS3: 7.4

Описание

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8cfitsioWill not fix

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1568180cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

CVSS3: 8.8
nvd
почти 8 лет назад

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

CVSS3: 8.8
debian
почти 8 лет назад

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images ...

CVSS3: 8.8
github
больше 3 лет назад

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

7.4 High

CVSS3