GNS3/dynamips

dynamipsv0.2.22: 1 vulnerabilities (highest severity is: 6.2)

Closed this issue · 0 comments

Vulnerable Library - dynamipsv0.2.22

Dynamips development

Library home page: https://github.com/GNS3/dynamips.git

Vulnerable Source Files (1)

/common/gen_eth.c

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in (dynamipsv0.2.22 version) Remediation Available
CVE-2022-47012 Medium 6.2 dynamipsv0.2.22 Direct N/A

Details

CVE-2022-47012

Vulnerable Library - dynamipsv0.2.22

Dynamips development

Library home page: https://github.com/GNS3/dynamips.git

Found in base branch: master

Vulnerable Source Files (1)

/common/gen_eth.c

Vulnerability Details

Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.

Publish Date: 2023-01-20

URL: CVE-2022-47012

CVSS 3 Score Details (6.2)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Local
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: High
    • Integrity Impact: None
    • Availability Impact: None

For more information on CVSS3 Scores, click here.