Lucene search
HistoryJun 19, 2015 - 2:59 p.m.
CVE-2015-4675
cve-2015-4675
buffer overflow
tiny srp library
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
High
0.058 Low
EPSS
Percentile
93.4%
Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted size value for the username field.
Affected configurations
Node
tinysrp_projecttinysrpRange≤0.7.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| tinysrp_project:tinysrp | tinysrp project tinysrp | le | 0.7.5 |
Related
nvd
nvd
CVE-2015-4675
2015-06-19 14:59:03
prion
prion
Buffer overflow
2015-06-19 14:59:00
cvelist
cvelist
CVE-2015-4675
2015-06-19 14:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
High
0.058 Low
EPSS
Percentile
93.4%
Related for CVE-2015-4675