Поиск уязвимостей
Количество 14
Количество 14
ALT-PU-2026-16244
ALT-PU-2026-16244: package `libpff` update to version 20231205-alt3
CVE-2018-11723
The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub
CVE-2018-11723
The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub
CVE-2018-11723
The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map ...
GHSA-fjv9-r9p4-38h5
** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.
CVE-2018-20348
libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
CVE-2018-20348
libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
CVE-2018-20348
libpff_item_tree_create_node in libpff_item_tree.c in libpff before ex ...
CVE-2020-18897
An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file.
CVE-2020-18897
An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file.
CVE-2020-18897
An use-after-free vulnerability in the libpff_item_tree_create_node fu ...
GHSA-8pp8-7wvw-f67f
libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
GHSA-8whc-587x-j3fm
An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file.
BDU:2022-01763
Уязвимость функции libpff_item_tree_create_node библиотеки для доступа к файлам PFF и OFF Libpff, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-16244 ALT-PU-2026-16244: package `libpff` update to version 20231205-alt3 | CVSS3: 7.8 | около 1 месяца назад | |
 | CVE-2018-11723 The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub | CVSS3: 5.5 | 1% Низкий | больше 8 лет назад |
 | CVE-2018-11723 The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub | CVSS3: 5.5 | 1% Низкий | больше 8 лет назад |
| CVE-2018-11723 The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map ... | CVSS3: 5.5 | 1% Низкий | больше 8 лет назад |
| GHSA-fjv9-r9p4-38h5 ** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub. | CVSS3: 5.5 | 1% Низкий | больше 4 лет назад |
| CVE-2018-20348 libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. | CVSS3: 5.5 | 0% Низкий | почти 8 лет назад |
| CVE-2018-20348 libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. | CVSS3: 5.5 | 0% Низкий | почти 8 лет назад |
| CVE-2018-20348 libpff_item_tree_create_node in libpff_item_tree.c in libpff before ex ... | CVSS3: 5.5 | 0% Низкий | почти 8 лет назад |
| CVE-2020-18897 An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file. | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
| CVE-2020-18897 An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file. | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
| CVE-2020-18897 An use-after-free vulnerability in the libpff_item_tree_create_node fu ... | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
| GHSA-8pp8-7wvw-f67f libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. | CVSS3: 5.5 | 0% Низкий | больше 4 лет назад |
| GHSA-8whc-587x-j3fm An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file. | 1% Низкий | больше 4 лет назад | |
 | BDU:2022-01763 Уязвимость функции libpff_item_tree_create_node библиотеки для доступа к файлам PFF и OFF Libpff, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
Уязвимостей на страницу