Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-48554
HistoryAug 22, 2023 - 12:00 a.m.

CVE-2022-48554

2023-08-2200:00:00
ubuntu.com
ubuntu.com
9
file project
buffer over-read
funcs.c
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.9%

File before 5.43 has an stack-based buffer over-read in file_copystr in
funcs.c. NOTE: “File” is the name of an Open Source project.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchfile< 1:5.41-3ubuntu0.1UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.9%