Количество 16
Количество 16
BDU:2024-05923
Уязвимость функции GTime2str парсера ASN1 Parser библиотеки libcurl, позволяющая нарушителю вызвать октаз в обслуживании
ROS-20240816-22
Уязвимость libcurl
ROS-20240816-13
Уязвимость zlib
ROS-20240816-02
Уязвимость curl
CVE-2024-7264
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
CVE-2024-7264
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
CVE-2024-7264
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
CVE-2024-7264
CVE-2024-7264
libcurl's ASN1 parser code has the `GTime2str()` function, used for pa ...
SUSE-SU-2024:3080-2
Security update for curl
SUSE-SU-2024:3080-1
Security update for curl
SUSE-SU-2024:2938-1
Security update for curl
GHSA-97c4-2w4v-c7r8
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
SUSE-SU-2024:2784-1
Security update for curl
ELSA-2025-1673
ELSA-2025-1673: mysql:8.0 security update (IMPORTANT)
ELSA-2025-1671
ELSA-2025-1671: mysql security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-05923 Уязвимость функции GTime2str парсера ASN1 Parser библиотеки libcurl, позволяющая нарушителю вызвать октаз в обслуживании | CVSS3: 4.8 | 5% Низкий | больше 1 года назад |
 | ROS-20240816-22 Уязвимость libcurl | CVSS3: 4.8 | 5% Низкий | около 1 года назад |
| ROS-20240816-13 Уязвимость zlib | CVSS3: 4.8 | 5% Низкий | около 1 года назад |
| ROS-20240816-02 Уязвимость curl | CVSS3: 4.8 | 5% Низкий | около 1 года назад |
 | CVE-2024-7264 libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used. | CVSS3: 6.5 | 5% Низкий | больше 1 года назад |
 | CVE-2024-7264 libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used. | CVSS3: 5.3 | 5% Низкий | больше 1 года назад |
 | CVE-2024-7264 libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used. | CVSS3: 6.5 | 5% Низкий | больше 1 года назад |
 | CVSS3: 6.5 | 5% Низкий | около 1 года назад | |
| CVE-2024-7264 libcurl's ASN1 parser code has the `GTime2str()` function, used for pa ... | CVSS3: 6.5 | 5% Низкий | больше 1 года назад |
 | SUSE-SU-2024:3080-2 Security update for curl | 5% Низкий | около 1 года назад | |
| SUSE-SU-2024:3080-1 Security update for curl | 5% Низкий | около 1 года назад | |
| SUSE-SU-2024:2938-1 Security update for curl | 5% Низкий | около 1 года назад | |
| GHSA-97c4-2w4v-c7r8 libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used. | CVSS3: 6.5 | 5% Низкий | больше 1 года назад |
| SUSE-SU-2024:2784-1 Security update for curl | около 1 года назад | ||
| ELSA-2025-1673 ELSA-2025-1673: mysql:8.0 security update (IMPORTANT) | 9 месяцев назад | ||
| ELSA-2025-1671 ELSA-2025-1671: mysql security update (IMPORTANT) | 9 месяцев назад |
Уязвимостей на страницу