Описание
A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | ignored | end of life |
| devel | not-affected | 1.32.3-2 |
| disco | released | 1.32.3-2 |
| eoan | not-affected | 1.32.3-2 |
| esm-apps-legacy/xenial | released | 1.29.0+dfsg-1ubuntu2+esm1 |
| esm-apps/focal | not-affected | 1.32.3-2 |
| esm-apps/jammy | not-affected | 1.32.3-2 |
| esm-apps/xenial | released | 1.29.0+dfsg-1ubuntu2+esm1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
Показывать по
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username.
A classic Stack-based buffer overflow exists in the zmLoadUser() funct ...
A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username.
Уязвимость функции zmLoadUser() (zm_user.cpp) программного обеспечения для организации видеонаблюдения ZoneMinder, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
ALT-PU-2020-1092: package `zoneminder` update to version 1.34.0-alt1
7.5 High
CVSS2
9.8 Critical
CVSS3