VDB
BDU%3A2022-04113
BDU%3A2022-04113
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции thread_call() интерпретатора языка программирования Squirrel, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Alberto Demichelis | Fedora, Squirrel |
Timeline
- Jul 6, 2022 CVE Published
References
- http://squirrel-lang.org/ url
- https://nvd.nist.gov/vuln/detail/CVE-2022-30292 url
- https://github.com/sprushed/CVE-2022-30292 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DMIKSVTKNU5FRCUUNAYMCQLOJA3K3S2I/ url
- https://github.com/albertodemichelis/squirrel/commit/a6413aa690e0bdfef648c68693349a7b878fe60d advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WBUYGYXDQX3OSAYHP4TCG3JS7PJTIE75/ advisory