Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2020/08/25 1:45 p.m.•39 views

CVE-2020-24240

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

5.3AI score0.01265EPSS
SaveExploits0References3
GitLab Advisory Database
GitLab Advisory Database
•added 2020/08/25 12:00 a.m.•50 views

Use After Free

GNU Bison has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug report was...

7.1CVSS0.6AI score0.01265EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/25 12:00 a.m.•3 views

CVE-2020-24240: Use After Free

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

7.1CVSS6.1AI score0.01265EPSS
SaveExploits0References2
Rows per page
Query Builder