Lucene search
K

10 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.4 views

SUSE CVE-2018-11723

The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...

5.5CVSS6.6AI score0.01184EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.3 views

The vulnerability of the `libpff_item_tree_create_node` function in the library allows access to PFF and OFF files. This enables a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the libpffitemtreecreatenode function in the library for accessing PFF and OFF files is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a service failure using a...

7.8CVSS7.2AI score0.00522EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2021/08/19 10:15 p.m.3 views

DEBIAN-CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

7.8CVSS7.9AI score0.00522EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/08/19 10:15 p.m.21 views

CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

7.8CVSS7.4AI score0.00522EPSS
Exploits1References4
OSV
OSV
added 2021/08/19 10:15 p.m.2 views

UBUNTU-CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

7.8CVSS7.4AI score0.00522EPSS
Exploits1References5
Cvelist
Cvelist
added 2021/08/19 9:20 p.m.16 views

CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

7.8AI score0.00522EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/08/19 9:20 p.m.16 views

CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

7.8CVSS7.8AI score0.00522EPSS
Exploits1
NVD
NVD
added 2018/06/19 9:29 p.m.15 views

CVE-2018-11723

The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...

5.5CVSS5.4AI score0.01184EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/06/19 9:0 p.m.17 views

CVE-2018-11723

The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...

5.4AI score0.01184EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2018/06/19 9:0 p.m.19 views

CVE-2018-11723

The libpffnametoidmapentryread function in libpffnametoidmap.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub...

5.5CVSS5.4AI score0.01184EPSS
Exploits0
Rows per page
Query Builder