Количество 3
Количество 3
CVE-2020-5895
On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault (SIGSEGV) by writing malformed messages to the socket.
GHSA-359f-64m6-vf7p
On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault (SIGSEGV) by writing malformed messages to the socket.
BDU:2020-02785
Уязвимость служб Analytics, Visibility и Reporting платформы мониторинга и управления приложениями NGINX Controller, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-5895 On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault (SIGSEGV) by writing malformed messages to the socket. | CVSS3: 7.8 | 0% Низкий | больше 6 лет назад |
| GHSA-359f-64m6-vf7p On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault (SIGSEGV) by writing malformed messages to the socket. | CVSS3: 7.8 | 0% Низкий | около 4 лет назад |
 | BDU:2020-02785 Уязвимость служб Analytics, Visibility и Reporting платформы мониторинга и управления приложениями NGINX Controller, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.8 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу