Lucene search
PRIOn knowledge basePRION:CVE-2017-2807HistorySep 05, 2017 - 6:29 p.m.
Integer overflow
2017-09-0518:29:00
PRIOn knowledge base
www.prio-n.com
4
0.004 Low
EPSS
Percentile
74.8%
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.
Related
talos
talos
Ledger CLI Tags Parsing Code Execution Vulnerability
2017-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2017-2807
2017-09-05 00:00:00
cvelist
cvelist
CVE-2017-2807
2017-08-30 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-09-21 06:21:56
debiancve
debiancve
CVE-2017-2807
2017-09-05 18:29:00
seebug
seebug
Ledger CLI Tags Parsing Code Execution Vulnerability(CVE-2017-2807)
2017-09-12 00:00:00
osv
osv
CVE-2017-2807
2017-09-05 18:29:00
nvd
nvd
CVE-2017-2807
2017-09-05 18:29:00
cve
cve
CVE-2017-2807
2017-09-05 18:29:00
freebsd
freebsd
ledger -- multiple vulnerabilities
2017-09-05 00:00:00
nessus
nessus
FreeBSD : ledger -- multiple vulnerabilities (d843a984-7f22-484f-ba81-483ddbe30dc3)
2017-09-27 00:00:00
openSUSE Security Update : ledger (openSUSE-2019-1779)
2019-07-22 00:00:00
GLSA-202004-05 : ledger: Multiple vulnerabilities
2020-04-02 00:00:00
suse
suse
Security update for ledger (moderate)
2019-08-14 00:00:00
Security update for ledger (moderate)
2019-07-21 00:00:00
gentoo
gentoo
ledger: Multiple vulnerabilities
2020-04-01 00:00:00
openvas
openvas
openSUSE: Security Advisory for ledger (openSUSE-SU-2019:1779-1)
2019-07-22 00:00:00