Описание
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | transfig | Out of support scope | ||
| Red Hat Enterprise Linux 7 | transfig | Out of support scope | ||
| Red Hat Enterprise Linux 8 | transfig | Fixed | RHSA-2026:0756 | 19.01.2026 |
| Red Hat Enterprise Linux 9 | transfig | Fixed | RHSA-2026:0700 | 15.01.2026 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | transfig | Fixed | RHSA-2026:0705 | 15.01.2026 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | transfig | Fixed | RHSA-2026:0704 | 15.01.2026 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=2362058xfig: xfig: Stack-overflow allows possible code execution via local input manipulation
EPSS
Процентиль: 18%
0.00056
Низкий
7.8 High
CVSS3
Связанные уязвимости
CVSS3: 7.8
ubuntu
12 месяцев назад
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
CVSS3: 7.8
nvd
12 месяцев назад
A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
CVSS3: 7.8
debian
12 месяцев назад
A flaw was found in xfig. This vulnerability allows possible code exec ...
CVSS3: 7.1
github
12 месяцев назад
Stack-overflow in fig2dev in version 3.2.9a allows an attacker possible code execution via local input manipulation via bezier_spline function.
EPSS
Процентиль: 18%
0.00056
Низкий
7.8 High
CVSS3