19 matches found
CVE-2023-40294-and-CVE-2023-40295
While I was running boron in my environment, I happened to stumble upon 2 heap buffer overflows in libboron libboron.so.2 version 2.0.8 when processing slightly malformed input. This has been officially tested on both Mac x8664 and Linux x8664: Files for reproduction reproduction.zip Compiling gi...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
EUVD-2023-44888
Malicious code in bioql PyPI...
EUVD-2023-44887
Malicious code in bioql PyPI...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
Heap overflow
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
Heap overflow
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40295
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294: Out-of-bounds Write
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40295: Out-of-bounds Write
libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40295
CVE-2023-40295 affects the Boron project: libboron in Boron 2.0.8 contains a heap-based overflow in the function ur_strInitUtf8 (string.c). The vulnerability is reported with a high impact (CVSS v3.1: High, network attack, user interaction required). Public detail across connected sources confirm...
PT-2023-27362 · Libboron +1 · Libboron +1
Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur parseBlockI function at i parse blk.c. This overflow can occur in the libboron component of Boron. Recommendations: For Boron version 2.0.8, consider disabli...