7.5
CVE-2020-36420
- EPSS 0.71%
- Published 15.07.2021 00:15:07
- Last modified 21.11.2024 05:29:27
- Source cve@mitre.org
- CVE-Watchlists
- Open
LoginPolipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Data is provided by the National Vulnerability Database (NVD)
Polipo Project ≫ Polipo Version <= 1.1.1
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.71% | 0.699 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-617 Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.