cmark-gfm 输入验证错误漏洞

cmark-gfm is an extended version of the C-reference implementation of CommonMark, a rationalized version with canonical Markdown syntax. cmark-gfm suffers from an input validation error vulnerability that could be exploited by an attacker to cause remote code execution in applications using the...

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

Impact CommonMarker uses cmark-gfm for rendering Github Flavored Markdown. An integer overflow in cmark-gfm's table row parsing may lead to heap memory corruption when parsing tables who's marker rows contain more than UINT16MAX columns. The impact of this heap corruption ranges from Information...

[SECURITY] Fedora 34 Update: rust-pulldown-cmark-0.8.0-4.fc34

Pull parser for CommonMark...

Fedora: Security Advisory for rust-pulldown-cmark (FEDORA-2021-2db6c84087)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: pandoc security update

An update for pandoc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

cmark-gfm: Exponential time to parse certain inputs could lead to DoS

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

ALSA-2021:1972 Moderate: pandoc security update

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Security Fixes: cmark-gfm: Exponential time to parse certain inputs could lead to DoS CVE-2020-5238 For more details about the security issues, including the impact, a CVS...

Moderate: pandoc security update

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Security Fixes: cmark-gfm: Exponential time to parse certain inputs could lead to DoS CVE-2020-5238 For more details about the security issues, including the impact, a CVS...

Fedora 31 : ghc-cmark-gfm / ghc-hakyll / gitit / pandoc / pandoc-citeproc / etc (2020-fe299b3fa3)

Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5 -hc85 Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

Fedora: Security Advisory for ghc-cmark-gfm (FEDORA-2020-1eaffe0013)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for ghc-cmark-gfm (FEDORA-2020-fe299b3fa3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : ghc-cmark-gfm / ghc-hakyll / gitit / pandoc / pandoc-citeproc / etc (2020-1eaffe0013)

Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 - also update hakyll to 4.13.4.0 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5 -hc85 Note that Tenable Network Security has extracted the preceding...

CVE-2020-5238

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

CVE-2020-5238 Denial of service in table parsing in cmark-gfm

The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes On n time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project...

cmark: Global-buffer-overflow in S_render_node

Project: https://github.com/jgm/cmark.git https://github.com/commonmark/cmark.git Detailed report: https://oss-fuzz.com/testcase?key=6744015116435456 Project: cmark Fuzzer: libFuzzercmarkfuzzer Fuzz target binary: cmarkfuzzer Job Type: libfuzzerasancmark Platform Id: linux Crash Type:...

cmark: Crash in S_out

Project: https://github.com/jgm/cmark.git https://github.com/commonmark/cmark.git Detailed report: https://oss-fuzz.com/testcase?key=6412495315009536 Project: cmark Fuzzer: libFuzzercmarkfuzzer Fuzz target binary: cmarkfuzzer Job Type: libfuzzerasancmark Platform Id: linux Crash Type: UNKNOWN REA...

cmark: Index-out-of-bounds in S_render_node

Project: https://github.com/jgm/cmark.git https://github.com/commonmark/cmark.git Detailed report: https://oss-fuzz.com/testcase?key=5546760854306816 Project: cmark Fuzzer: libFuzzercmarkfuzzer Fuzz target binary: cmarkfuzzer Job Type: libfuzzerubsancmark Platform Id: linux Crash Type:...