Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-jjv1-tv43-1yc4 |
| Summary | freeipmi: buffer overflows on response messages via ipmi-oem |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
120 |
| name |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') |
| description |
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. |
|
|
| Exploits |
|
| Severity_range_score | 8.8 - 8.8 |
| Exploitability | 0.5 |
| Weighted_severity | 7.9 |
| Risk_score | 4.0 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-jjv1-tv43-1yc4 |