Ledger 'ledger::parse_date_mask_routine' function buffer overflow vulnerability

Ledger is an accounting system written by software developer John Wiegley that supports UNIX commands. A security vulnerability in the 'ledger::parsedatemaskroutine' function in the Ledger times.cc file allows remote attackers to exploit the vulnerability by submitting a special file for denial o...

DEBIAN-CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-12482

The ledger::parsedatemaskroutine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

PT-2017-12568

Name of the Vulnerable Software and Affected Versions Ledger version 3.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a stack-based buffer overflow and application crash, or possibly have other unspecified impacts. This is achieved through a crafted...