CVE-2020-27818

Katalog CVE

CVSS 3.3 · Low EPSS 1,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada libpng pngcheck, fedoraproject extra packages for enterprise linux +2 lainnya. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.

Rincian

Terbit di NVD

8 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bodhi.fedoraproject.org/updates/FEDORA-2020-04d5e1ce26 advisory pihak ketiga
• https://bodhi.fedoraproject.org/updates/FEDORA-2020-23432b7b72 advisory pihak ketiga
• https://bodhi.fedoraproject.org/updates/FEDORA-2020-27b168926a advisory pihak ketiga
• https://bodhi.fedoraproject.org/updates/FEDORA-2020-4349e95c4f advisory pihak ketiga
• https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-339db397ad advisory pihak ketiga
• https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2020-6c93c61069 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1902011 issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/05/msg00043.html mailing list · advisory pihak ketiga