Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2018-3848
HistoryApr 16, 2018 - 4:29 p.m.

CVE-2018-3848

2018-04-1616:29:00
Alpine Linux Development Team
security.alpinelinux.org
9

0.004 Low

EPSS

Percentile

74.4%

In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

OSVersionArchitecturePackageVersionFilename
Alpine3.14-communitynoarchcfitsio= 3.49-r1UNKNOWN