ROS-20240911-09

Vulnerability of the pkgconftupleparse function libpkgconf/tuple.c of the software tool for setting flags for pkgconf development libraries is related to a buffer overrun. compiler and linker flags for pkgconf development libraries is related to the operation exceeding the buffer boundaries. in...

pkgconf development tool Heap Buffer Overflow DoS

The vulnerability of the pkgconftupleparse function in the library for configuring compiler and assembler flags for the pkgconf development tool is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failu...

CVE-2023-24056: Out-of-bounds Write

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...

CVE-2023-24056

In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...