The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade c-ares
to version 1.19.1 or higher.
Affected versions of this package are vulnerable to Buffer Underwrite (Buffer Underflow) in the ares_inet_net_pton()
function. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist()
. However, users may externally use ares_inet_net_pton()
for other purposes and thus be vulnerable to more severe issues.