Bcder
1 CVEs
product
Monthly
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Bcder
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2023-39914
Cargo
EPSS 1%
CVSS 7.5
HIGH
PATCH
This Week
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Bcder
NVD