Vendors / Pkgconf Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Pkgconf records in CISA KEV No Pkgconf vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial length is 0, leading to buffer overflow.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01352 · Published 2018-08-20 · No fix listed CWE-119
Priority LOW 26
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00581 · Published 2023-01-22 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
1 0 1 0 0
