7.5
CVE-2022-35505
- EPSS 0.87%
- Veröffentlicht 03.08.2022 21:15:08
- Zuletzt bearbeitet 21.11.2024 07:11:15
- CVE-Watchlists
- Unerledigt
LoginA segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Triplecross Project ≫ Triplecross Version0.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.87% | 0.561 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://github.com/h3xduck/TripleCross/issues/40