Yüksek CVSS 7.7 PoC var
CVE-2025-13601: Codeready Linux Builder: tamsayı taşması
Açıklama (NVD)
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Özet bilgiler
- Ürün
- Redhat Codeready Linux Builder
- CVSS v3.1
- 7.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H - EPSS
- %0,35 (yüzdelik 28)
- CWE
- CWE-190
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-codeready-linux-builder | 9.0 | 9.0 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems | 9.0_s390x | 9.0_s390x | — |
| redhat-codeready-linux-builder-for-power-little-endian | 9.0_ppc64le | 9.0_ppc64le | — |
| redhat-codeready-linux-builder-for-x86-64 | 9.0 | 9.0 | — |
| redhat-enterprise-linux-for-arm-64 | 9.0 | 9.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 9.0_s390x | 9.0_s390x | — |
| redhat-enterprise-linux-for-power-little-endian | 9.0_ppc64le | 9.0_ppc64le | — |
| redhat-enterprise-linux-for-x86-64 | 9.0 | 9.0 | — |
| redhat-codeready-linux-builder-for-arm64 | 10.0 | 10.0 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems | 10.0_s390x | 10.0_s390x | — |
| redhat-codeready-linux-builder-for-power-little-endian | 10.0_ppc64le | 10.0_ppc64le | — |
| redhat-codeready-linux-builder-for-x86-64 | 10.0 | 10.0 | — |
| redhat-enterprise-linux-for-arm-64 | 10.0 | 10.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 10.0_s390x | 10.0_s390x | — |
| redhat-enterprise-linux-for-power-little-endian | 10.0_ppc64le | 10.0_ppc64le | — |
| redhat-enterprise-linux-for-x86-64 | 10.0 | 10.0 | — |
| redhat-codeready-linux-builder-for-arm64 | 8.0 | 8.0 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems | 8.0_s390x | 8.0_s390x | — |
| redhat-codeready-linux-builder-for-power-little-endian | 8.0_ppc64le | 8.0_ppc64le | — |
| redhat-codeready-linux-builder-for-x86-64 | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-arm-64 | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 8.0_s390x | 8.0_s390x | — |
| redhat-enterprise-linux-for-power-little-endian | 8.0_ppc64le | 8.0_ppc64le | — |
| redhat-enterprise-linux-for-x86-64 | 8.0 | 8.0 | — |
| redhat-enterprise-linux-for-arm-64 | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 9.2_s390x | 9.2_s390x | — |
| redhat-enterprise-linux-for-power-little-endian | 9.2_ppc64le | 9.2_ppc64le | — |
| redhat-enterprise-linux-for-x86-64 | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-aus | 9.2 | 9.2 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 9.4 | 9.4 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- CWE-190