Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-39914

Опубликовано: 13 сент. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 7.5

Описание

NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage
noble

needs-triage

oracular

not-affected

0.7.3-1

Показывать по

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.

CVSS3: 7.5
debian
больше 2 лет назад

NLnet Labs' bcder library up to and including version 0.7.2 panics whi ...

CVSS3: 7.5
github
больше 2 лет назад

BER/CER/DER decoder panics on invalid input

7.5 High

CVSS3