Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36854
HistoryAug 30, 2022 - 7:28 p.m.

Denial Of Service (DoS)

2022-08-3019:28:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.6%

htmldoc is vulnerable to denial of service. The vulnerability exists in write_node in htmldoc due to a buffer overflow which allows an attacker to cause an application crash.

CPENameOperatorVersion
htmldoc:sideq1.9.8-2
htmldoc:sideq1.9.8-2

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

10.6%