Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2018-13139

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 04 июл. 2018
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: low
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.8

ОписаниС

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
artful

ignored

end of life
bionic

released

1.0.28-4ubuntu0.18.04.1
cosmic

released

1.0.28-4ubuntu0.18.10.1
devel

not-affected

1.0.28-6
disco

not-affected

1.0.28-6
eoan

not-affected

1.0.28-6
esm-infra-legacy/trusty

released

1.0.25-7ubuntu2.2+esm1
esm-infra-legacy/xenial

released

1.0.25-10ubuntu0.16.04.2
esm-infra/bionic

released

1.0.28-4ubuntu0.18.04.1
esm-infra/focal

not-affected

1.0.28-6

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 88%
0.03574
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

БвязанныС уязвимости

CVSS3: 7.8
redhat
ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

CVSS3: 8.8
nvd
ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

CVSS3: 8.8
msrc
большС 5 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

ОписаниС отсутствуСт

CVSS3: 8.8
debian
ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A stack-based buffer overflow in psf_memset in common.c in libsndfile ...

CVSS3: 8.8
github
ΠΎΠΊΠΎΠ»ΠΎ 4 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 88%
0.03574
Низкий

6.8 Medium

CVSS2

8.8 High

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2018-13139