CVE-2023-40294-and-CVE-2023-40295

Mientras ejecutaba boron en mi entorno, me topé con 2 desbordamientos de búfer en el montón en libboron libboron.so.2 versión 2.0.8 al procesar entradas ligeramente malformadas. Esto ha sido probado oficialmente tanto en Mac x8664 como en Linux x8664: Archivos para la reproducción reproduction.zi...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

EUVD-2023-44888

Malicious code in bioql PyPI...

EUVD-2023-44887

Malicious code in bioql PyPI...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

Heap overflow

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

Heap overflow

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294: Out-of-bounds Write

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295

CVE-2023-40295 affects the Boron project: libboron in Boron 2.0.8 contains a heap-based overflow in the function ur_strInitUtf8 (string.c). The vulnerability is reported with a high impact (CVSS v3.1: High, network attack, user interaction required). Public detail across connected sources confirm...

CVE-2023-40295

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40295: Out-of-bounds Write

libboron in Boron 2.0.8 has a heap-based buffer overflow in urstrInitUtf8 at string.c...

PT-2023-27362 · Libboron +1 · Libboron +1

Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur parseBlockI function at i parse blk.c. This overflow can occur in the libboron component of Boron. Recommendations: For Boron version 2.0.8, consider disabli...