Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Libconfuse Project records in CISA KEVNo Libconfuse Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01762 · Published 2018-07-20 · No fix listed CWE-125
Priority MEDIUM 41
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01455 · Published 2022-09-09 · No fix listed CWE-125
Priority MEDIUM 40
cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01069 · Published 2018-11-30 · No fix listed CWE-772
Open these records in search →