Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-18652

Опубликовано: 22 авг. 2023
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

A buffer overflow flaw was found in the exempi package. This issue occurs in WEBP_Support.cpp and may allow remote attackers to cause a denial of service via opening a crafted webp file.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6exempiOut of support scope
Red Hat Enterprise Linux 7exempiOut of support scope
Red Hat Enterprise Linux 9exempiNot affected
Red Hat Enterprise Linux 8exempiFixedRHSA-2024:306622.05.2024

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2235673exempi: denial of service via opening of crafted webp file

EPSS

Процентиль: 77%
0.01062
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 2 года назад

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

CVSS3: 6.5
nvd
почти 2 года назад

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

CVSS3: 6.5
debian
почти 2 года назад

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and ...

suse-cvrf
почти 2 года назад

Security update for exempi

CVSS3: 6.5
github
почти 2 года назад

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

EPSS

Процентиль: 77%
0.01062
Низкий

6.5 Medium

CVSS3