2 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-14876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the lshift function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate a big integer, however...
6.5CVSS6.6AI score0.01331EPSS
SaveExploits1References3
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing allocation check in sftp server processing read requests. A malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which is not being checked for failure. For...
6.5CVSS7AI score0.00903EPSS
SaveExploits0References2
20