Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-48554
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2022-48554

2023-08-2219:16:31
Alpine Linux Development Team
security.alpinelinux.org
11
open source project
file over-read
funcs.c
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.9%

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: “File” is the name of an Open Source project.

OSVersionArchitecturePackageVersionFilename
Alpine3.16-mainnoarchfile= 5.41-r0UNKNOWN
Alpine3.15-mainnoarchfile= 5.41-r0UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.9%