7.8
CVE-2008-3196
- EPSS 1.45%
- Veröffentlicht 16.07.2008 18:41:00
- Zuletzt bearbeitet 16.06.2026 22:55:20
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginskeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.45% | 0.699 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
http://marc.info/?l=openbsd-cvs&m=121553004431393&w=2
http://marc.info/?l=openbsd-cvs&m=121553036432044&w=2
http://secunia.com/advisories/31073
http://www.vupen.com/english/advisories/2008/2151/references