Veracode Vulnerability DatabaseVERACODE:43962Denial Of Services (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.8%
libpodofo.so is vulnerable to Denial of Service (DoS). This vulnerability exists because it does not properly return null pointers in the stbi_load_gif_from_memory function of stb_image.h, which allows an attacker to cause an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libstb.so | eq | 0.0 | |
| libstb.so | eq | 0.0 | |
| stb:3.19 | eq | 0_git20220908-r3 | |
| stb:edge | eq | 0_git20220908-r1 | |
| stb:edge | eq | 0_git20220908-r0 | |
| stb:edge | eq | 0_git20220908-r3 |
References
github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_image.h#L1442-L1454
github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_image.h#L1448
lists.fedoraproject.org/archives/list/[email protected]/message/NMXKOKPP4BKTNUTF5KSRDQAWOUILQZNO/
lists.fedoraproject.org/archives/list/[email protected]/message/QVABVF4GEM6BYD5L4L64RCRSXUHY6LGN/
lists.fedoraproject.org/archives/list/[email protected]/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/
securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.8%