Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-3849
HistoryApr 16, 2018 - 4:29 p.m.

Stack overflow

2018-04-1616:29:00
PRIOn knowledge base
www.prio-n.com
4

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.

CPENameOperatorVersion
fedoraeq28
cfitsiolt3.490

8.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%