3 results (0.012 seconds)

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 2

moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted file. The component is: front.c, function txt_add. The fixed version is: after commit commit 08aef597656d065e86075f3d53fda89765845eae. moinejf abcm2ps 8.13.20 se ve afectado por: Control de acceso incorrecto. El impacto es: permite que los atacantes causen un ataque de denegación de servicio a través de un archivo creado. • https://drive.google.com/drive/u/2/folders/1Y2IbtEr9v4l4Ruie_AY9BFJOHOGiDt7S https://github.com/leesavide/abcm2ps/issues/18 https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 2%CPEs: 5EXPL: 2

Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Un desbordamiento de búfer basado en montones en la función get_key en parse.c en abcm2ps hasta la versión 8.13.20 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, provocar cualquier otro tipo de problema. • https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2 https://github.com/leesavide/abcm2ps/issues/17 https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6DUTXB4EC3TQHTTAAIBKJ • CWE-787: Out-of-bounds Write •

CVSS: 9.8EPSS: 3%CPEs: 5EXPL: 0

Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Un desbordamiento de búfer basado en pila en la función delayed_output en music.c en abcm2ps hasta la versión 8.13.20 permite que atacantes remotos provoquen una denegación de servicio (cierre inesperado de la aplicación) o, posiblemente, provocar cualquier otro tipo de problema. • https://drive.google.com/drive/u/2/folders/1DvBEh5D-eW4UkvX3947UQh62i7hUIFN1 https://github.com/leesavide/abcm2ps/issues/16 https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ • CWE-787: Out-of-bounds Write •