PT-2022-11230 · Gerbv +3 · Gerbv +3

🗓️ 04 Feb 2022 00:00:00Reported by Positive TechnologiesType

Gerbv tokenization use-after-free may trigger code execution in versions 2.7.0–2.7.1 and in the dev build with commit b5f1eacd.

Reporter	Title	Published	Views	Family All 168
BDU FSTEC	The vulnerability of software for the development and mass production of Gerbv printed circuits lies in the ability to write data beyond the buffer limit, allowing an attacker to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software for the development and mass production of Gerbv printed circuits lies in the ability to write data beyond the buffer limit, allowing an attacker to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-40391	19 Nov 202122:17	–	circl
Circl	CVE-2021-40393	22 Dec 202122:23	–	circl
Circl	CVE-2021-40394	2 Mar 202218:40	–	circl
Circl	CVE-2021-40400	2 Mar 202218:40	–	circl
Circl	CVE-2021-40401	2 Mar 202218:40	–	circl
Circl	CVE-2021-40402	2 Mar 202218:40	–	circl
Circl	CVE-2023-4508	25 Aug 202302:13	–	circl
CNNVD	Gerbv 缓冲区错误漏洞	4 Nov 202100:00	–	cnnvd

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2021-1415
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/notices/USN-6209-1
errata	www.errata.altlinux.org/ALT-PU-2024-17535
osv	www.osv.dev/vulnerability/USN-6209-1
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47
osv	www.osv.dev/vulnerability/DSA-5306-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
advisories	www.advisories.mageia.org/MGASA-2022-0260.html

25 Dec 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.15.5 - 10

CVSS 27.5

CVSS 310

EPSS0.00555

SSVC