PT-2022-8071 · Rgb2Hex · Rgb2Hex

Published 2022-12-31 · Updated 2024-05-17 · CVE-2018-25061

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rgb2hex versions up to 0.1.5

Description A vulnerability was found in the rgb2hex software, affecting some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely.

Recommendations For rgb2hex versions up to 0.1.5, upgrade to version 0.1.6 to address this issue.

Fix

DoS

Weakness Enumeration

CWE-1333

Related Identifiers

CVE-2018-25061

GHSA-7599-FQGM-V84P

Affected Products

Rgb2Hex

References · 9

• https://github.com/christian-bromann/rgb2hex/releases/tag/v0.1.6 · Patch
• https://github.com/christian-bromann/rgb2hex/commit/9e0c38594432edfa64136fdf7bb651835e17c34f · Patch
• https://osv.dev/vulnerability/CVE-2018-25061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-25061 · Security Note
• https://osv.dev/vulnerability/GHSA-7599-fqgm-v84p · Vendor Advisory
• https://github.com/christian-bromann/rgb2hex · Note
• https://t.me/cvenotify/41079 · Telegram Post
• https://vuldb.com/?ctiid.217151 · Note
• https://vuldb.com/?id.217151 · Note