yocto ▾
›
master ▾
›
vulnerability
›
CVE-2019-14274
Component Overview
Vulnerability Overview
Name
CVE-2019-14274
Source
NVD (
link
)
Debian (
link
)
Description
MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.
CWEs
CWE-787
Published Date
Jul 26, 2019
Updated Date
Jun 17, 2026
Workaround
-
Advisories
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html
Mailing List
https://security.gentoo.org/glsa/202208-04
Third Party Advisory
https://sourceforge.net/p/mcpp/bugs/13/
Exploit
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html
Mailing List
https://security.gentoo.org/glsa/202208-04
Third Party Advisory
https://sourceforge.net/p/mcpp/bugs/13/
Exploit
Analysis
#
Affected Component
Analysis
mcpp
Exploitable
Vulnerability Ratings
#
5.5
CVSSv31
4.3
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
mcpp
yocto
kirkstone
2.7.2
Exploitable
mcpp
yocto
scarthgap
2.7.2
Exploitable