Avaya Libsafe vulnerabilities

3 CVEs affecting Avaya Libsafe, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-1125, published 2005-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-1125, published 2005-05-02. Medium severity, CVSS 5.1. EPSS: 6.7% chance of exploitation in the next 30 days. Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die…
CVE-2002-0176, published 2002-04-22. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not…
CVE-2002-0175, published 2002-04-22. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not…