5.5
CVSSv3

CVE-2019-14274

Published: 26/07/2019 Updated: 13/12/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mcpp project mcpp 2.7.2

opensuse leap 15.1

opensuse backports sle 15.0

Vendor Advisories

Debian Bug report logs - #933497 mcpp: CVE-2019-14274 Package: src:mcpp; Maintainer for src:mcpp is Kiyoshi Matsui <kmatsui@t3rimorjp>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 30 Jul 2019 20:03:04 UTC Severity: normal Tags: security, upstream Found in version mcpp/272-4 Forwarded to ...
Impact: Moderate Public Date: 2019-07-26 CWE: CWE-122 Bugzilla: 1740464: CVE-2019-14274 mcpp: heap base ...