CVE-2022-2061

low-risk
Published 2022-06-13

Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.

Do I need to act?

-
0.06% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.3/10 Low
LOCAL / LOW complexity

Affected Products (1)

Chafa

Affected Vendors

Chafa Project

References (4)

Patch https://github.com/hpjansson/chafa/commit/e6ce3746cdcf0836b9dae659a5aed15d73a080...
Exploit https://huntr.dev/bounties/365ab61f-9a63-421c-97e6-21d4653021f0
Patch https://github.com/hpjansson/chafa/commit/e6ce3746cdcf0836b9dae659a5aed15d73a080...
Exploit https://huntr.dev/bounties/365ab61f-9a63-421c-97e6-21d4653021f0
18
/ 100
low-risk
Severity 13/34 · Low
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal