CVE-2023-40294-and-CVE-2023-40295

제 환경에서 boron을 실행하던 중, 우연히 2개의 힙 버퍼 오버플로우를 발견했습니다. libboronlibboron.so.2 버전 2.0.8에서 약간 잘못된 형식의 입력을 처리할 때 발생했습니다. 이는 Mac x8664과 Linux x8664에서 공식적으로 테스트되었습니다: Files for reproduction reproduction.zip 컴파일 git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install &&...

QuaNTUM: A Modular Quantum Communication Testbed for Scalable Fiber and Satellite Integration

Secure communication is essential for modern society, from financial transactions to critical infrastructure. As classical encryption faces threats from advancing computational power, quantum communication provides a fundamentally secure alternative based on physical laws. We present QuaNTUM...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

EUVD-2023-44887

Malicious code in bioql PyPI...

Malicious code in @malware-test-torcs-chirm-boron-bribe/test-mlw3-torcs-chirm-boron-bribe (npm)

The package @malware-test-torcs-chirm-boron-bribe/test-mlw3-torcs-chirm-boron-bribe was found to contain malicious code...

Lightweight Hybrid Block-Stream Cryptographic Algorithm for the Internet of Things

In this thesis, a novel lightweight hybrid encryption algorithm named SEPAR is proposed, featuring a 16-bit block length and a 128-bit initialization vector. The algorithm is designed specifically for application in Internet of Things IoT technology devices. The design concept of this algorithm i...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

Boron Buffer Error Vulnerability

Boron is an interpreted, prototype-based scripting language from the personal developer Marc Simpson. A security vulnerability exists in Boron version 2.0.8, which stems from a buffer overflow vulnerability in urparseBlockI...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

Boron Buffer Error Vulnerability

Boron is an interpreted, prototype-based scripting language from the personal developer Marc Simpson. A security vulnerability exists in Boron version 2.0.8, which stems from a buffer overflow vulnerability in urstrInitUtf8...

CVE-2023-40294

CVE-2023-40294 affects Boron 2.0.8, specifically the libboron component; the heap-based buffer overflow occurs in ur_parseBlockI (i_parse_blk.c). The vulnerability is rated with CVSSv3.1: Network attack vector, low complexity, no privileges, user interaction required, and Availability impact High...

CVE-2023-40294: Out-of-bounds Write

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295: Out-of-bounds Write

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40295

CVE-2023-40295 affects the Boron project: libboron in Boron 2.0.8 contains a heap-based overflow in the function ur_strInitUtf8 (string.c). The vulnerability is reported with a high impact (CVSS v3.1: High, network attack, user interaction required). Public detail across connected sources confirm...