PT-2022-18489
CVE-2022-27569
·
Published
2022-04-11
·
Updated
2022-04-18
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
libsimba library versions prior to SMR Apr-2022 Release 1
Description
The issue is a heap-based buffer overflow vulnerability in the
parser infe function. This allows a remote attacker to execute code.Recommendations
For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
parser infe function in the libsimba library until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾