Nixpkgs security tracker
Dismissed
(not in Nixpkgs)
Permalink
CVE-2019-25602
5.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
3 packages
- vdrPlugins.epgsearch
- haskellPackages.stringsearch
- haskellPackages.gogol-kgsearch
- @LeSuisse dismissed (not in Nixpkgs)
GSearch 1.0.1.0 Denial of Service via Search Input
GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an application crash.
References
-
ExploitDB-47026 exploit
-
Product Reference product
-
VulnCheck Advisory: GSearch 1.0.1.0 Denial of Service via Search Input third-party-advisory
Affected products
GSearch
- ==1.0.1.0
Ignored packages (3)
pkgs.vdrPlugins.epgsearch
Searchtimer and replacement of the VDR program menu
pkgs.haskellPackages.stringsearch
Fast searching, splitting and replacing of ByteStrings