PT-2019-6183
CVE-2020-21548
·
تاريخ النشر
2019-12-16
·
تاريخ التحديث
2021-09-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Libsixel version 1.8.3
Description
The issue is related to a heap-based buffer overflow in the
sixel encode highcolor function in tosixel.c. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.Recommendations
For Libsixel version 1.8.3, consider disabling the
sixel encode highcolor function as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾