Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-3846
HistoryApr 16, 2018 - 4:29 p.m.

Stack overflow

2018-04-1616:29:00
PRIOn knowledge base
www.prio-n.com
3

8.9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.6%

In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

CPENameOperatorVersion
fedoraeq28
cfitsioeq3.42

8.9 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.6%