Lucene search

K
osvGoogleOSV:CVE-2017-7555
HistoryAug 17, 2017 - 7:29 p.m.

CVE-2017-7555

2017-08-1719:29:00
Google
osv.dev
3

9.8 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.