Описание
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 0.3.6-6 |
| esm-apps-legacy/xenial | released | 0.3.6-2ubuntu0.16.04.1+esm1 |
| esm-apps/bionic | released | 0.3.6-4ubuntu0.1~esm1 |
| esm-apps/focal | released | 0.3.6-5+deb10u1build0.20.04.1 |
| esm-apps/jammy | released | 0.3.6-5+deb10u1build0.22.04.1 |
| esm-apps/xenial | released | 0.3.6-2ubuntu0.16.04.1+esm1 |
| esm-infra-legacy/trusty | released | 0.3.6-2ubuntu0.14.04.3+esm1 |
| focal | released | 0.3.6-5+deb10u1build0.20.04.1 |
| impish | ignored | end of life |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
In autofile Audio File Library 0.3.6, there exists one memory leak vul ...
In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive information via a crafted file. The printfileinfo function calls the copyrightstring function to get data, however, it dosn't use zero bytes to truncate the data.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3