Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-28041

Опубликовано: 17 фев. 2022
Источник: redhat
CVSS3: 6.2

Описание

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Отчет

This flaw does not affect the versions of cogl shipped with Red Hat Enterprise Linux 7 or 8 because the affected code is not shipped in those packages. This flaw is out of support scope for Red Hat Enterprise Linux 6.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6clutterOut of support scope
Red Hat Enterprise Linux 7coglNot affected
Red Hat Enterprise Linux 7compat-cogl114Not affected
Red Hat Enterprise Linux 8coglNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=2077019stb: integer overflow in stbi__jpeg_decode_block_prog_dc() can lead to DoS

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 4 года назад

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS3: 6.5
nvd
почти 4 года назад

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS3: 6.5
debian
почти 4 года назад

stb_image.h v2.27 was discovered to contain an integer overflow via th ...

CVSS3: 6.5
github
почти 4 года назад

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS3: 5.3
fstec
почти 4 года назад

Уязвимость компонента stb_image.h библиотек для C/C++ Libstb, позволяющая нарушителю вызвать отказ в обслуживании

6.2 Medium

CVSS3