Vulnerability in Avaya Libsafe

CVE-2002-0176

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.

Affected products

  • Avaya Libsafe — versions 1.3.4, 1.3.8, 2.0.2
  • N/a — versions n/a

References