Lucene search

GoogleOSV:CVE-2019-8904

HistoryFeb 18, 2019 - 5:29 p.m.

CVE-2019-8904

2019-02-1817:29:00

Google

osv.dev

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON

do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.

CPENameOperatorVersion
fileeqFILE5_31
fileeq5.07-r1
fileeqFILE5_15
fileeqFILE4_26
fileeqFILE5_26
fileeq5.12-r0
fileeq4.26-r1
fileeqFILE3_32
fileeq5.19-r0
fileeq5.03-r0

Name	Operator	Version
file	eq	FILE5_31
file	eq	5.07-r1
file	eq	FILE5_15
file	eq	FILE4_26
file	eq	FILE5_26
file	eq	5.12-r0
file	eq	4.26-r1
file	eq	FILE3_32
file	eq	5.19-r0
file	eq	5.03-r0

Rows per page:

1-10 of 1201

References

www.securityfocus.com/bid/107130

bugs.astron.com/view.php?id=62

usn.ubuntu.com/3911-1/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.4%

JSON

Related for OSV:CVE-2019-8904