md4c project kayıtları
md4c project üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %25
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read2
- CWE-787 Out-of-bounds Write2
- CWE-908 Use of Uninitialized Resource2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-476 NULL Pointer Dereference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-11536İstismar yok | md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.md4c project · md4c · CWE-787 | Kritik9,8 | — | %1,6 | 29 May 2018 |
39İzleyin | CVE-2018-11546İstismar yok | md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.md4c project · md4c · CWE-125 | Kritik9,8 | — | %1,5 | 29 May 2018 |
39İzleyin | CVE-2018-11547İstismar yok | md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination.md4c project · md4c · CWE-125 | Kritik9,8 | — | %1,5 | 29 May 2018 |
39İzleyin | CVE-2018-11545İstismar yok | md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely omd4c project · md4c · CWE-787 | Kritik9,8 | — | %1,5 | 29 May 2018 |
31İzleyin | CVE-2018-12112İstismar yok | md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) omd4c project · md4c · CWE-119 | Yüksek7,8 | — | %1,2 | 11 Haz 2018 |
30İzleyin | CVE-2020-26148İstismar yok | md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., asmd4c project · md4c · CWE-908 | Yüksek7,5 | — | %1,4 | 30 Eyl 2020 |
22İzleyin | CVE-2018-12102İstismar yok | md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.md4c project · md4c · CWE-476 | Orta5,5 | — | %0,8 | 11 Haz 2018 |
22İzleyin | CVE-2021-30027İstismar yok | md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformmd4c project · md4c · CWE-908 | Orta5,5 | — | %0,6 | 29 Nis 2021 |
- CVE-2018-1153639İzleyin
md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.
KritikCVSS 9,8İstismar yokEPSS %1md4c project · md4c29 May 2018
- CVE-2018-1154639İzleyin
md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.
KritikCVSS 9,8İstismar yokEPSS %1md4c project · md4c29 May 2018
- CVE-2018-1154739İzleyin
md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination.
KritikCVSS 9,8İstismar yokEPSS %1md4c project · md4c29 May 2018
- CVE-2018-1154539İzleyin
md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely o
KritikCVSS 9,8İstismar yokEPSS %1md4c project · md4c29 May 2018
- CVE-2018-1211231İzleyin
md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) o
YüksekCVSS 7,8İstismar yokEPSS %1md4c project · md4c11 Haz 2018
- CVE-2020-2614830İzleyin
md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., as
YüksekCVSS 7,5İstismar yokEPSS %1md4c project · md4c30 Eyl 2020
- CVE-2018-1210222İzleyin
md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.
OrtaCVSS 5,5İstismar yokEPSS %0md4c project · md4c11 Haz 2018
- CVE-2021-3002722İzleyin
md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malform
OrtaCVSS 5,5İstismar yokEPSS %0md4c project · md4c29 Nis 2021