CVE Catalog
CVE-1999-1330
MediumExploitation Probability (EPSS)
Low risk0.40%
31th percentile - higher than 31% of all known CVEs
Summary
The snprintf function in the db library version 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.
Risk Assessment
Ignoring the size parameter poses a risk of buffer overflow, which could lead to the execution of malicious code and system compromise.
Recommendation
It is recommended to update the db library to the latest version that fixes the snprintf implementation to prevent buffer overflows.
Original NVD description (English source)
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.