Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libbsd | Aug 30, 2017 | Jan 13, 2017 |
| Debian | — | Upgrade libbsd | Jan 2, 2020 | Jan 13, 2017 |
| Gentoo Linux | — | Upgrade dev-libs/libbsd. | Oct 30, 2017 | Jan 13, 2017 |
| Ubuntu | — | Upgrade libbsd0 (Ubuntu Pro)Upgrade libbsd0 | Jan 21, 2020 | Jan 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub