Lucene search

[email protected]CVE-2022-35016

HistoryAug 29, 2022 - 2:15 p.m.

CVE-2022-35016

2022-08-2914:15:11

CWE-787

[email protected]

web.nvd.nist.gov

advancecomp

v2.3

heap buffer overflow

cve-2022-35016

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.5%

JSON

Advancecomp v2.3 was discovered to contain a heap buffer overflow.

Affected configurations

NVD

Node

advancemameadvancecompMatch2.3

Node

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch36

fedoraprojectfedoraMatch37

CPENameOperatorVersion
advancemame:advancecompadvancemame advancecompeq2.3

CPE	Name	Operator	Version
advancemame:advancecomp	advancemame advancecomp	eq	2.3

References

drive.google.com/file/d/1oWVhoJJih6-pgbvrZsx5oFUtv-vgR0fF/view?usp=sharing

github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35016.md

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE/

Social References

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.5%

JSON

Related for CVE-2022-35016

veracode1 alpinelinux1 osv2 cvelist1 nvd1 debiancve1 redhatcve1 prion1 ubuntucve1 freebsd1 openvas5 ubuntu1 mageia1 nessus4 fedora3