5.5
CVE-2020-28759
- EPSS 0.32%
- Veröffentlicht 26.12.2020 20:15:12
- Zuletzt bearbeitet 21.11.2024 05:23:10
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tengine Project ≫ Tengine Version1.0 SwEditionlite
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.549 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.