Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-0699

Опубликовано: 17 окт. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

1.5.0-3
esm-apps-legacy/xenial

released

1.3.0-5ubuntu0.1~esm1
esm-apps/bionic

released

1.4.1-1ubuntu0.1~esm1
esm-apps/focal

released

1.5.0-1ubuntu0.1~esm1
esm-apps/jammy

released

1.5.0-2+deb11u1build0.22.04.1
esm-apps/noble

not-affected

1.5.0-3
esm-apps/resolute

not-affected

1.5.0-3
esm-apps/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needs-triage

Показывать по

EPSS

Процентиль: 77%
0.0166
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

CVSS3: 9.8
msrc
около 3 лет назад

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

CVSS3: 9.8
debian
около 4 лет назад

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 ...

suse-cvrf
больше 4 лет назад

Security update for shapelib

CVSS3: 9.8
github
около 4 лет назад

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

EPSS

Процентиль: 77%
0.0166
Низкий

9.8 Critical

CVSS3