Поиск уязвимостей
Количество 5
Количество 5
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requiremen ...
GHSA-xh64-jjg2-744m
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
ALT-PU-2017-2781
ALT-PU-2017-2781: package `libcryptopp` update to version 5.6.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
 | CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
| CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requiremen ... | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
| GHSA-xh64-jjg2-744m Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | больше 4 лет назад |
| ALT-PU-2017-2781 ALT-PU-2017-2781: package `libcryptopp` update to version 5.6.5-alt1 | CVSS3: 7.5 | почти 9 лет назад |
Уязвимостей на страницу