Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:23069
HistoryApr 10, 2020 - 12:15 a.m.

Buffer Underflow

2020-04-1000:15:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

The gzip is vulnerable to Buffer Underflow. If a victim expanded a specially crafted archive, it could cause the gzip executable to crash or execute arbitrary code.

References

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P