Lucene search
+L

96 matches found

Veracode
Veracode
added 2021/12/31 10:4 p.m.23 views

Denial Of Service (DoS)

cflow is vulnerable to denial of service. The vulnerability exists due to a Use-after-Free via the pointer variable caller-callee in cflow in the void callchar name, int line function at src/parser.c...

5.5CVSS3.5AI score0.0042EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
added 2021/06/03 12:0 a.m.21 views

Fedora: Security Advisory for cflow (FEDORA-2021-e8cab459ab)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.7AI score0.0042EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/06/03 12:0 a.m.36 views

Fedora: Security Advisory for cflow (FEDORA-2021-6ef76430d0)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.7AI score0.0042EPSS
SaveExploits1References2
Fedora
Fedora
added 2021/06/01 1:5 a.m.42 views

[SECURITY] Fedora 33 Update: cflow-1.6-8.fc33

GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU...

2.1CVSS0.9AI score0.0042EPSS
SaveExploits1
Fedora
Fedora
added 2021/06/01 1:4 a.m.50 views

[SECURITY] Fedora 34 Update: cflow-1.6-8.fc34

GNU cflow analyzes a collection of C source files and prints a graph, charting control flow within the program. GNU cflow is able to produce both direct and inverted flowgraphs for C sources. Optionally a cross-reference listing can be generated. Two output formats are implemented: POSIX and GNU...

2.1CVSS0.9AI score0.0042EPSS
SaveExploits1
CNVD
CNVD
added 2021/05/20 12:0 a.m.30 views

GNU cflow Resource Management Error Vulnerability (CNVD-2021-36540)

GNU cflow is a flowchart generator for the GNU community that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in cflow version 1.6, which stems from the existence of a post-release use of the callchar name, int line function in...

5.5CVSS6.6AI score0.0042EPSS
SaveExploits1References1
NVD
NVD
added 2021/05/18 3:15 p.m.55 views

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS0.0042EPSS
SaveExploits1References4
OSV
OSV
added 2021/05/18 3:15 p.m.3 views

DEBIAN-CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS5.5AI score0.0042EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/18 3:15 p.m.13 views

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS6.6AI score
SaveExploits0References4
Prion
Prion
added 2021/05/18 3:15 p.m.20 views

Design/Logic Flaw

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

2.1CVSS5.4AI score0.0042EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2021/05/18 3:15 p.m.11 views

UBUNTU-CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS6AI score0.0042EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2021/05/18 3:15 p.m.24 views

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS6.1AI score0.0042EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/05/18 2:41 p.m.58 views

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.3AI score0.0042EPSS
SaveExploits1References4
CVE
CVE
added 2021/05/18 2:41 p.m.75 views

CVE-2020-23856

CVE-2020-23856 affects GNU cflow version 1.6, where a use-after-free in the function void call(char *name, int line) inside src/parser.c can cause denial of service via the caller->callee pointer. Multiple trusted sources (NVD entry and CNVD/OSV mirrors) confirm the vulnerability’s existence i...

5.5CVSS5.3AI score0.0042EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2021/05/18 2:41 p.m.75 views

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

5.5CVSS5.3AI score0.0042EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/05/18 12:0 a.m.7 views

GNU cflow 资源管理错误漏洞

GNU cflow is a flowchart generator for the GNU community that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in cflow version 1.6, which stems from the existence of a post-release use of the callchar name, int line function in...

5.5CVSS5.6AI score0.0042EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2020/07/09 12:0 a.m.12 views

PT-2020-6421 · Cflow +2 · Cflow +2

Name of the Vulnerable Software and Affected Versions: cflow version 1.6 Description: The issue is related to a Use-after-Free vulnerability in the call function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee. This vulnerability may allow an attacker...

6.5CVSS5.7AI score0.01114EPSS
SaveExploits1References20
CNVD
CNVD
added 2019/09/12 12:0 a.m.7 views

GNU cflow Resource Management Error Vulnerability

GNU cflow is a flowchart generator from the GNU Project that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in the 'reference' function of the parser.c file in GNU cflow 1.6 and earlier versions, which arises from mismanagemen...

6.5CVSS6.8AI score0.01114EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/09 5:15 p.m.24 views

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

6.5CVSS6.5AI score0.01113EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/09 5:15 p.m.10 views

CVE-2019-16166

GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c...

6.5CVSS6.8AI score
SaveExploits0References1
Rows per page
Query Builder