Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-1000178

Опубликовано: 08 мая 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.

РелизСтатусПримечание
artful

ignored

end of life
bionic

released

1:0.12.4-3ubuntu1.18.04.3
cosmic

ignored

end of life
devel

not-affected

1:0.13.1-1ubuntu2
disco

ignored

end of life
eoan

not-affected

1:0.13.1-1ubuntu1.19.10.1
esm-apps/bionic

released

1:0.12.4-3ubuntu1.18.04.3
esm-apps/focal

not-affected

1:0.13.1-1ubuntu2
esm-apps/jammy

not-affected

1:0.13.1-1ubuntu2
esm-apps/noble

not-affected

1:0.13.1-1ubuntu2

Показывать по

EPSS

Процентиль: 77%
0.01075
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
больше 7 лет назад

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.

CVSS3: 9.8
debian
больше 7 лет назад

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in ...

CVSS3: 9.8
github
больше 3 лет назад

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.

suse-cvrf
почти 8 лет назад

Security update for quassel

EPSS

Процентиль: 77%
0.01075
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3