Lucene search

K
cve[email protected]CVE-2022-36647
HistorySep 02, 2022 - 10:15 p.m.

CVE-2022-36647

2022-09-0222:15:08
CWE-120
web.nvd.nist.gov
27
6
cve-2022-36647
pkuvcl
davs2
buffer overflow
parse_sequence_header
source/common/header.cc:269
nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.0%

PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.

Affected configurations

NVD
Node
davs2_projectdavs2Match1.6.205

Social References

More

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.0%

Related for CVE-2022-36647