CVE-2020-35605

Katalog CVE

CVSS 9.8 · Critical EPSS 3,8%

Kerentanan pada kovidgoyal kitty, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message.

Rincian

Terbit di NVD

21 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

3,8% peluang dieksploitasi; lebih tinggi dari 89,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kovidgoyal/kitty/commit/82c137878c2b99100a3cdc1c0f0efea069313901 patch · advisory pihak ketiga
• https://github.com/kovidgoyal/kitty/issues/3128 exploit · issue tracking · advisory pihak ketiga
• https://www.debian.org/security/2020/dsa-4819 advisory pihak ketiga