Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-0499

Опубликовано: 15 дек. 2020
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 4.3

Описание

In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070

РелизСтатусПримечание
bionic

released

1.3.2-1ubuntu0.1
devel

not-affected

1.3.4-2
esm-infra-legacy/trusty

released

1.3.0-2ubuntu0.14.04.1+esm1
esm-infra/bionic

released

1.3.2-1ubuntu0.1
esm-infra/focal

released

1.3.3-1ubuntu0.1
esm-infra/xenial

released

1.3.1-4ubuntu0.1~esm1
focal

released

1.3.3-1ubuntu0.1
groovy

ignored

end of life
hirsute

ignored

end of life
impish

ignored

end of life

Показывать по

EPSS

Процентиль: 90%
0.05474
Низкий

4.3 Medium

CVSS2

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
около 5 лет назад

In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070

CVSS3: 4.3
nvd
около 5 лет назад

In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070

CVSS3: 4.3
debian
около 5 лет назад

In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a p ...

suse-cvrf
около 5 лет назад

Security update for flac

github
больше 3 лет назад

In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070

EPSS

Процентиль: 90%
0.05474
Низкий

4.3 Medium

CVSS2

4.3 Medium

CVSS3