CVE-2017-7555

2017-08-1700:00:00

CWE-122

redhat

www.cve.org

9.7 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

JSON

Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.

CNA Affected

[
  {
    "product": "augeas",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "up to and including 1.8.0"
      }
    ]
  }
]