3
check
.ru
Инструменты
Уязвимости БДУ
Блоклисты
Расширение
Утилиты
Блог
API
Мониторинг
Главная
→
Уязвимости
→ CVE-2022-48620
9.8
критическая
CVE-2022-48620
Описание
uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.
Затрагиваемое ПО
Troglobit Libeuv
CVSS
Балл
9.8
— критическая
Вектор
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/troglobit/libuev/commit/2d9f1c9ce655cc38511aeeb6e95ac30914f7aec9
https://github.com/troglobit/libuev/compare/v2.4.0...v2.4.1
https://github.com/troglobit/libuev/issues/27
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2J4UB4KXWCCTZCE53B6SFIREZ57INK7T/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6RLVLJGDKTEVJP446TFDANHB4LHRAOP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2XZESYGE6XDWAPFUOX26ZWJV2JWMMM5/
https://github.com/troglobit/libuev/commit/2d9f1c9ce655cc38511aeeb6e95ac30914f7aec9
https://github.com/troglobit/libuev/compare/v2.4.0...v2.4.1