PT-2019-19996

Published

2019-06-04

·

Updated

2019-06-04

Description by

CVSS 3.1
5.1
Medium
MetricsAV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions floody versions prior to 0.1.1
Description The issue concerns remote memory exposure. In the affected floody versions, the write(number) function passes a number to the Buffer constructor, which appends a chunk of uninitialized memory. This can lead to exposure of sensitive data.
Recommendations Update to version 0.1.1 or later.
Exploitability
Fix
Vendors
Affected products
Related identifiers
GHSA-3P92-886G-QXPQ
Found an issue in the description? Have something to add? Feel free to write us 👾