VDB

ALINUX2-SA-2020%3A0042

ALINUX2-SA-2020%3A0042 PUBLISHED CVSS 5.400000095367432 MEDIUM

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-10360: The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file.

Risk Scores

CVSS 3.0
5.400000095367432
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

VendorProductVersions
Alibaba Cloudfile

Timeline

  • Apr 2, 2020 CVE Published
  • Apr 2, 2020 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›