CVE-2022-34913

CVE-2022-34913 concerns the Markdown processor md2roff, specifically version 1.7. The Red Hat and related sources describe a stack-based buffer overflow when parsing a Markdown file containing a large sequence of consecutive characters, with the vulnerability tied to the code path in md2roff.c (n...

md2roff buffer error vulnerability

md2roff is a personal developer by Nicholas Christopoulos that converts markdown to groff / troff man, mdoc, mm, mom documents. A buffer error vulnerability exists in md2roff version 1.7, which is caused by a stack-based buffer overflow in Markdown files containing a large number of consecutive...

PT-2022-22432 · Md2Roff · Md2Roff

Name of the Vulnerable Software and Affected Versions: md2roff version 1.7 Description: The issue is a stack-based buffer overflow that occurs when processing a Markdown file containing a large number of consecutive characters. It's noted that the vendor's position is that the product is not...

CVE-2022-34913: Out-of-bounds Write

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input...