Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-26134

Опубликовано: 19 фев. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 7.5

Описание

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue.

РелизСтатусПримечание
bionic

DNE

devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

mantic

ignored

end of life, was needs-triage
noble

needs-triage

Показывать по

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue.

CVSS3: 7.5
debian
больше 2 лет назад

cbor2 provides encoding and decoding for the Concise Binary Object Rep ...

CVSS3: 7.5
github
больше 2 лет назад

Potential buffer overflow in CBOR2 decoder

suse-cvrf
10 месяцев назад

Security update for python-cbor2

7.5 High

CVSS3