Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-45679

Опубликовано: 18 сент. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.4

Описание

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/xenial

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

noble

needs-triage

oracular

needs-triage

Показывать по

EPSS

Процентиль: 27%
0.00091
Низкий

8.4 High

CVSS3

Связанные уязвимости

CVSS3: 8.4
nvd
9 месяцев назад

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

CVSS3: 8.4
debian
9 месяцев назад

Heap-based buffer overflow vulnerability in Assimp versions prior to 5 ...

CVSS3: 7.5
redos
4 месяца назад

Уязвимость python3-werkzeug

CVSS3: 8.4
github
9 месяцев назад

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

CVSS3: 8.4
fstec
9 месяцев назад

Уязвимость библиотеки импорта 3D-моделей Open Asset Import Library (Assimp), связанная с переполнением буфера кучи, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 27%
0.00091
Низкий

8.4 High

CVSS3