Поиск уязвимостей
Количество 8
Количество 8
BDU:2025-04748
Уязвимость функций convert() и queryConvert() коллекции библиотек классов POCO языка программирования C++, позволяющая нарушителю выполнить произвольный код
ALT-PU-2024-13957
ALT-PU-2024-13957: package `poco` update to version 1.12.5p2-alt0.p10.1
ALT-PU-2023-8418
ALT-PU-2023-8418: package `poco` update to version 1.12.5p1-alt1
CVE-2023-52389
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0.
CVE-2023-52389
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0.
CVE-2023-52389
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow a ...
GHSA-3g75-6vfp-4hm3
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0.
ALT-PU-2024-13338
ALT-PU-2024-13338: package `poco` update to version 1.13.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-04748 Уязвимость функций convert() и queryConvert() коллекции библиотек классов POCO языка программирования C++, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-13957 ALT-PU-2024-13957: package `poco` update to version 1.12.5p2-alt0.p10.1 | CVSS3: 9.8 | 1% Низкий | около 2 лет назад |
| ALT-PU-2023-8418 ALT-PU-2023-8418: package `poco` update to version 1.12.5p1-alt1 | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
 | CVE-2023-52389 UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
 | CVE-2023-52389 UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| CVE-2023-52389 UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow a ... | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| GHSA-3g75-6vfp-4hm3 UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0. | CVSS3: 9.8 | 1% Низкий | почти 3 года назад |
| ALT-PU-2024-13338 ALT-PU-2024-13338: package `poco` update to version 1.13.3-alt1 | CVSS3: 9.8 | 1% Низкий | около 2 лет назад |
Уязвимостей на страницу