Vulnerability Details CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 70.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/165199/Steghide-Hidden-Data-Extraction.html
- https://github.com/StefanoDeVuono/steghide
- https://github.com/b4shfire/stegcrack
- https://sourceforge.net/projects/steghide/files/steghide/0.5.1/
- http://packetstormsecurity.com/files/165199/Steghide-Hidden-Data-Extraction.html
- https://github.com/StefanoDeVuono/steghide
- https://github.com/b4shfire/stegcrack
- https://sourceforge.net/projects/steghide/files/steghide/0.5.1/
Products affected by CVE-2021-27211
-
cpe:2.3:a:steghide_project:steghide:0.5.1