PT-2022-18489
CVE-2022-27569
·
تاريخ النشر
2022-04-11
·
تاريخ التحديث
2022-04-18
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
libsimba library versions prior to SMR Apr-2022 Release 1
Description
The issue is a heap-based buffer overflow vulnerability in the
parser infe function. This allows a remote attacker to execute code.Recommendations
For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
parser infe function in the libsimba library until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾