Lucene search

K
redosRedosROS-20230620-02
HistoryJun 20, 2023 - 12:00 a.m.

ROS-20230620-02

2023-06-2000:00:00
redos.red-soft.ru
4
freeimages
graphic formats
vulnerability
buffer boundaries
memory
exploitation
denial of service
jxr file
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

20.6%

Vulnerability of FreeImages library for working with graphic formats is related to reading data outside the buffer boundaries in memory.
buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely,
to cause a denial of service via a crafted JXR file.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64freeimage<= 3.18.0-2UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

20.6%