Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2023-26966

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 29 июн. 2023
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: medium
EPSS Низкий
CVSS3: 5.5

ОписаниС

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
bionic

ignored

end of standard support
devel

not-affected

4.5.1+git230720-1ubuntu1
esm-infra-legacy/trusty

released

4.0.3-7ubuntu0.11+esm8
esm-infra/bionic

released

4.0.9-5ubuntu0.10+esm1
esm-infra/focal

released

4.1.0+git191117-2ubuntu0.20.04.9
esm-infra/xenial

released

4.0.6-1ubuntu0.8+esm11
focal

released

4.1.0+git191117-2ubuntu0.20.04.9
jammy

released

4.3.0-6ubuntu0.5
kinetic

ignored

end of life, was needs-triage
lunar

released

4.5.0-5ubuntu1.1

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 6%
0.00026
Низкий

5.5 Medium

CVSS3

БвязанныС уязвимости

CVSS3: 5.5
redhat
большС 2 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

CVSS3: 5.5
nvd
большС 2 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

CVSS3: 5.5
msrc
большС 2 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

CVSS3: 5.5
debian
большС 2 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when lib ...

CVSS3: 9.8
github
большС 2 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 6%
0.00026
Низкий

5.5 Medium

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2023-26966