Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-0034

Опубликовано: 10 мар. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 7.8
CVSS3: 7.5

Описание

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

РелизСтатусПримечание
bionic

not-affected

1.7.0-3ubuntu0.18.04.1
devel

not-affected

1.8.2-1
eoan

not-affected

1.8.1-2
esm-infra-legacy/trusty

not-affected

1.3.0-2ubuntu0.1~esm2
esm-infra/bionic

not-affected

1.7.0-3ubuntu0.18.04.1
esm-infra/focal

not-affected

1.8.2-1
esm-infra/xenial

released

1.5.0-2ubuntu1.1+esm1
focal

not-affected

1.8.2-1
groovy

not-affected

1.8.2-1
hirsute

not-affected

1.8.2-1

Показывать по

EPSS

Процентиль: 84%
0.02415
Низкий

7.8 High

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 5 лет назад

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

CVSS3: 7.5
nvd
больше 5 лет назад

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

CVSS3: 7.5
debian
больше 5 лет назад

In vp8_decode_frame of decodeframe.c, there is a possible out of bound ...

suse-cvrf
около 5 лет назад

Security update for libvpx

suse-cvrf
больше 3 лет назад

Security update for libvpx

EPSS

Процентиль: 84%
0.02415
Низкий

7.8 High

CVSS2

7.5 High

CVSS3