Orta CVSS 4.4 PoC var
CVE-2019-8906: File: sınır dışı okuma
Açıklama (NVD)
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
Özet bilgiler
- Ürün
- File Project File
- CVSS v3.1
- 4.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L - EPSS
- %0,50 (yüzdelik 43)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| file-project-file | 5.35 | 5.35 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 18.10 | 18.10 | — |
| opensuse-leap | 15.0 | 15.0 | — |
| opensuse-leap | 42.3 | 42.3 | — |
| apple-iphone-os | — | — | 12.2 |
| apple-mac-os-x | — | — | 10.14.4 |
| apple-tvos | — | — | 12.2 |
| apple-watchos | — | — | 5.2 |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- bugs.astron.com
- github.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- usn.ubuntu.com
- lists.opensuse.org
- lists.opensuse.org
- bugs.astron.com
- github.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- usn.ubuntu.com
- CWE-125