Lucene search
K

24 matches found

SUSE CVE
SUSE CVE
added 2026/04/23 1:36 a.m.2 views

SUSE CVE-2017-20230

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

10CVSS5.8AI score0.00037EPSS
Exploits0References4
NVD
NVD
added 2026/04/21 4:16 p.m.1 views

CVE-2017-20230

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

10CVSS0.00037EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/21 3:26 p.m.1 views

CVE-2017-20230 Storable versions before 3.05 for Perl has a stack overflow

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

5.8AI score0.00037EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/21 3:26 p.m.2 views

CVE-2017-20230

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

10CVSS5.8AI score0.00037EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.2 views

PT-2026-33993

Name of the Vulnerable Software and Affected Versions Storable versions prior to 3.05 Description A stack overflow exists in the retrieve hook function. The issue occurs because the length of the class name is stored as a signed integer but is treated as unsigned during read operations, allowing ...

10CVSS5.2AI score0.00037EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2026/04/09 11:25 p.m.1 views

SUSE CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS5.9AI score0.00077EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/04/07 11:1 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References1
OSV
OSV
added 2026/04/06 8:16 p.m.2 views

DEBIAN-CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS4.8AI score0.00077EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/06 7:49 p.m.2 views

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2026/04/06 7:49 p.m.3 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS4.8AI score0.00077EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2026/04/06 7:49 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/04/06 7:49 p.m.0 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown markup language in C. From 1.3.1.1 to before 2.2.7.4, a signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser,...

5.9CVSS7.3AI score0.00077EPSS
Exploits1References1
CVE
CVE
added 2026/04/06 7:49 p.m.45 views

CVE-2026-35201

Discount is an implementation of John Gruber's Markdown in C (rdiscount). A signed length truncation bug in the default Markdown parse path affects inputs from 1.3.1.1 up to before 2.2.7.4, enabling an out-of-bounds read and potentially crashing the process. The vulnerability arises when input le...

5.9CVSS6AI score0.00077EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2026/04/06 5:53 p.m.1 views

GHSA-6R34-94WQ-JHRC rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process Details In both...

5.9CVSS6AI score0.00077EPSS
Exploits1References6
RubySec
RubySec
added 2026/04/06 12:0 a.m.5 views

rdiscount has an Out-of-bounds Read

Summary A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INTMAX are truncated to a signed int before entering the native parser, allowing the parser to read past the end of the supplied buffer and crash the process. Details In both...

5.9CVSS7.2AI score0.00077EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30724

Name of the Vulnerable Software and Affected Versions Discount versions 1.3.1.1 through 2.2.7.3 Description A signed length truncation bug causes an out-of-bounds read in the default Markdown parse path. Inputs larger than INT MAX are truncated to a signed int before entering the native parser,...

5.9CVSS6AI score0.00077EPSS
Exploits1References14
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.4 views

discount 缓冲区错误漏洞

Discount is a Markdown language parsing and conversion tool developed by Orc developers. Versions of Discount from 1.3.1.1 to 2.2.7.4 contained a buffer error vulnerability. This vulnerability stemmed from a signed length truncation error, which could lead to out-of-bounds reads and process crash...

5.9CVSS7.3AI score0.00077EPSS
Exploits1References2
NVD
NVD
added 2026/01/27 2:15 p.m.2 views

CVE-2026-1485

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access...

2.8CVSS0.00013EPSS
Exploits1References3
OSV
OSV
added 2026/01/27 2:15 p.m.0 views

UBUNTU-CVE-2026-1485

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access...

2.8CVSS5.9AI score0.00013EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/27 1:43 p.m.18 views

CVE-2026-1485 Glib: glib: local denial of service via buffer underflow in content type parsing

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access...

2.8CVSS0.00013EPSS
Exploits1References3
Rows per page
Query Builder