Stack overflow

2023-06-1320:15:00

PRIOn knowledge base

www.prio-n.com

matthias-wandel jhead vulnerable buffer_overflow stack_bufferoverflow nvd cve-2020-28361.

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple &i or &o are given.