CVE-2020-27818
LOW
3,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low
MEDIUM
4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: none
Integrity: none
Availability: partial
Description
AI Translation Available
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0016
Percentile
0,4th
Updated
EPSS Score Trend (Last 91 Days)
120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
IncompleteCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Modify Memory
Execute Unauthorized Code Or Commands
Dos: Crash, Exit, Or Restart
Dos: Resource Consumption (Cpu)
Applicable Platforms
Languages:
Assembly, C, C++, Memory-Unsafe
125
Out-of-bounds Read
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Availability
Other
Potential Impacts:
Read Memory
Bypass Protection Mechanism
Dos: Crash, Exit, Or Restart
Varies By Context
Applicable Platforms
Languages:
C, C++, Memory-Unsafe
Technologies:
ICS/OT
Operating System
Fedora by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Extra Packages For Enterprise Linux by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Fedora by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Fedora by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Extra Packages For Enterprise Linux by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Pngcheck by Libpng
CPE Identifier
View Detailed Analysis
cpe:2.3:a:libpng:pngcheck:2.4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Debian Linux by Debian
CPE Identifier
View Detailed Analysis
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Fedora by Fedoraproject
CPE Identifier
View Detailed Analysis
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://bodhi.fedoraproject.org/updates/FEDORA-2020-04d5e1ce26
https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72
https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4349e95c4f
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-339db397ad
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6c93c61069
https://bugzilla.redhat.com/show_bug.cgi?id=1902011
https://lists.debian.org/debian-lts-announce/2022/05/msg00043.html
https://bodhi.fedoraproject.org/updates/FEDORA-2020-04d5e1ce26
https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72
https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a
https://bodhi.fedoraproject.org/updates/FEDORA-2020-4349e95c4f
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-339db397ad
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6c93c61069
https://bugzilla.redhat.com/show_bug.cgi?id=1902011
https://lists.debian.org/debian-lts-announce/2022/05/msg00043.html