Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-0645

Опубликовано: 11 апр. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.3

Описание

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159

РелизСтатусПримечание
bionic

DNE

devel

not-affected

0.11.1-4
esm-apps/noble

released

0.7.0-10.2ubuntu6.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

DNE

lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage
noble

released

0.7.0-10.2ubuntu6.1

Показывать по

EPSS

Процентиль: 21%
0.00066
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159

CVSS3: 5.3
debian
больше 2 лет назад

An out of bounds read exists in libjxl. An attacker using a specifical ...

CVSS3: 9.1
redos
30 дней назад

Уязвимость libjxl

CVSS3: 9.1
github
около 2 лет назад

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit  https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159

EPSS

Процентиль: 21%
0.00066
Низкий

5.3 Medium

CVSS3