PT-2018-10093 · Gnome+3 · Libgxps+3
Publicado
2018-05-06
·
Atualizado
2019-10-03
·
CVE-2018-10767
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libgxps versions prior to 0.3.1
Description
The issue is related to a stack-based buffer over-read in the function gxps images guess content type of gxps-images.c. This occurs because the function does not properly handle negative return values from a g input stream read call, which can be exploited with a crafted input to lead to a remote denial of service attack.
Recommendations
For versions prior to 0.3.1, update to version 0.3.1 or later to resolve the issue.
Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Libgxps