CVE-2024-4853 : Memory handling issue in editcap could cause denial of service via crafted captu

Memory handling issue in editcap could cause denial of service via crafted capture file

Published 2024-05-14 00:03:08

Updated 2024-08-29 15:15:32

Source GitLab Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2024-4853

Please log in to view affected product information.

EPSS FAQ

0.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 2 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
3.6	LOW	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L	N/A	N/A	GitLab Inc.	2024-05-14
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low
3.6	LOW	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L	1.0	2.5	GitLab Inc.	2024-05-14
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: Low Availability: Low

CWE-762 Mismatched Memory Management Routines

The product attempts to return a memory resource to the system, but it calls a release function that is not compatible with the function that was originally used to allocate that resource.

Assigned by: cve@gitlab.com (Secondary)

Jump to