Lucene search

K
osvGoogleOSV:GO-2022-1188
HistoryJan 12, 2023 - 5:34 p.m.

Uncontrolled memory allocation in code.sajari.com/docconv

2023-01-1217:34:50
Google
osv.dev
14
memory allocation
remote input
security risk
software

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

56.3%

An attacker can remotely supply a specially crafted input that causes uncontrolled memory allocation.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

56.3%