Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2018-25009

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 21 мая 2021
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: medium
EPSS Низкий
CVSS2: 6.4
CVSS3: 9.1

ОписаниС

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
bionic

released

0.6.1-2ubuntu0.18.04.1
devel

released

0.6.1-2ubuntu1
esm-infra-legacy/trusty

released

0.4.0-4ubuntu0.1~esm1
esm-infra-legacy/xenial

released

0.4.4-1ubuntu0.1~esm1
esm-infra/bionic

released

0.6.1-2ubuntu0.18.04.1
esm-infra/focal

released

0.6.1-2ubuntu0.20.04.1
esm-infra/xenial

released

0.4.4-1ubuntu0.1~esm1
focal

released

0.6.1-2ubuntu0.20.04.1
groovy

released

0.6.1-2ubuntu0.20.10.1
hirsute

released

0.6.1-2ubuntu0.21.04.1

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 80%
0.021
Низкий

6.4 Medium

CVSS2

9.1 Critical

CVSS3

БвязанныС уязвимости

CVSS3: 9.1
redhat
ΠΏΠΎΡ‡Ρ‚ΠΈ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

CVSS3: 9.1
nvd
ΠΎΠΊΠΎΠ»ΠΎ 5 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

CVSS3: 9.1
msrc
ΠΎΠΊΠΎΠ»ΠΎ 5 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

CVSS3: 9.1
debian
ΠΎΠΊΠΎΠ»ΠΎ 5 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A heap-based buffer overflow was found in libwebp in versions before 1 ...

CVSS3: 9.1
github
ΠΎΠΊΠΎΠ»ΠΎ 4 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 80%
0.021
Низкий

6.4 Medium

CVSS2

9.1 Critical

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2018-25009