Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Md2roff Project records in CISA KEVNo Md2roff Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 53
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02062 · Published 2022-09-21 · No fix listed CWE-787
Priority MEDIUM 47
md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02896 · Published 2022-07-02 · No fix listed CWE-787
