SUSE SLES12 Security Update : orc (SUSE-SU-2024:2643-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2643-1 advisory. - CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages for certain input files bsc1228184...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : orc (SUSE-SU-2024:2663-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2663-1 advisory. - CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages fo...

SUSE: Security Advisory (SUSE-SU-2024:2643-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2663-1 Security update for orc

This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages for certain input files bsc1228184...

CVE-2024-40897

creationtimestamp| type| source ---|---|--- 2024-07-26 08:48:31+00:00| seen| https://t.me/cvedetector/1670 2024-07-27 14:17:25+00:00| published-proof-of-concept| https://t.me/HackingInsights/7625 2024-07-28 08:12:42+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/622...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of...