Логотип exploitDog
bind:CVE-2019-18849
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-18849

Количество 4

Количество 4

ubuntu логотип

CVE-2019-18849

около 6 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2019-18849

около 6 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2019-18849

около 6 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim' ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-cq6j-h35c-x8gr

больше 3 лет назад

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
около 6 лет назад
nvd логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
около 6 лет назад
debian логотип
CVE-2019-18849

In tnef before 1.4.18, an attacker may be able to write to the victim' ...

CVSS3: 5.5
1%
Низкий
около 6 лет назад
github логотип
GHSA-cq6j-h35c-x8gr

In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup.

CVSS3: 5.5
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу