CVE-2017-2807

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability...

CVE-2017-2808

An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this...

ledger -- multiple vulnerabilities

Talos reports: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability. A...

Ledger CLI Account Directive Use-After-Free Vulnerability

Summary An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger th...

Microsoft Launches Ethereum-Based 'Coco Framework' to Speed Up Blockchain Network

A growing number of enterprises are showing their interest in blockchains, but the underlying software fails to meet key enterprise requirements like performance, confidentiality, governance, and required processing power. However, Microsoft wants to help solve these issues and make it easier for...

CVE-2017-10245

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with networ...

Design/Logic Flaw

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2017-10245

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2017-10245

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2017-10245

CVE-2017-10245 affects Oracle E-Business Suite’s General Ledger, specifically the Account Hierarchy Manager subcomponent. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle General...

Ledger Denial of Service Vulnerability

Ledger is a powerful double-entry bookkeeping system accessible from the UNIX command line. A denial of service vulnerability exists in the findoption function in option.cc in Ledger, which can be exploited by a remote attacker to cause a denial of service stack buffer overflow and application...

Ledger 'ledger::parse_date_mask_routine' function buffer overflow vulnerability

Ledger is an accounting system written by software developer John Wiegley that supports UNIX commands. A security vulnerability in the 'ledger::parsedatemaskroutine' function in the Ledger times.cc file allows remote attackers to exploit the vulnerability by submitting a special file for denial o...

Stack overflow

The findoption function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

Stack overflow

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-12481

The findoption function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-12481

The findoption function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

DEBIAN-CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...