CVE-2014-9474

CRITICO 9.8CVE-2014-9474 · Published 10/10/2017 · updated 17/06/2026

In breve

CVE-2014-9474 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda gnu mpfr (mpfr).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.5%, superiore al 91.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
gnu mpfr mpfr	`≤ 3.1.2`	No fix yet

Description

Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.

References

lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-January/147745.html · Third Party Advisory
mpfr.org/mpfr-3.1.2/patch11 · Vendor Advisory
openwall.com/lists/oss-security/2015/01/03/12 · Mailing List
securityfocus.com/bid/71542 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
gforge.inria.fr/scm/viewvc.php/mpfr · Third Party Advisory
gmplib.org/list-archives/gmp-bugs/2013-December/003267.html · Not Applicable
security.gentoo.org/glsa/201512-06 · Third Party Advisory

Altre vulnerabilità di gnu mpfr

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free