Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 5

Количество 5

ubuntu логотип

CVE-2019-18849

около 7 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2019-18849

около 7 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2019-18849

около 7 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim' ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-cq6j-h35c-x8gr

больше 4 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2019-3194

почти 7 лет назад

ALT-PU-2019-3194: package `tnef` update to version 1.4.18-alt1

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
около 7 лет назад
nvd логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
около 7 лет назад
debian логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim' ...

CVSS3: 5.5
1%
Низкий
около 7 лет назад
github логотип
GHSA-cq6j-h35c-x8gr

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2019-3194

ALT-PU-2019-3194: package `tnef` update to version 1.4.18-alt1

CVSS3: 5.5
1%
Низкий
почти 7 лет назад

Уязвимостей на страницу