The vulnerability of the ungetbyte and ungetc methods in the StringIO string handling utilities in the Ruby programming language allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the ungetbyte and ungetc methods in the StringIO string handling utilities in the Ruby programming language is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

Buffer Over-read

stringio is vulnerable to Buffer over-read. The vulnerability is due to improper bounds checking in the ungetbyte and ungetc methods, It allows an attacker to potentially access uninitialized or freed memory content, leading to the exposure of sensitive data...

SUSE CVE-2024-27280

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fix...

CVE-2024-27280

A buffer overread flaw was found in rubygem StringIO. The ungetbyte and ungetc methods on a StringIO object can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. Mitigation Mitigation for this issue is either not available or the currently availabl...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read due to the improper handling of the ungetbyte and ungetc methods on a StringIO object, which can read past the end of a string. An attacker can obtain sensitive information from memory by invoking StringIO.gets after...

SUSE CVE-2020-28024

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtpungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF...

The vulnerability of the smtp_ungetc() function in the Exim message transport agent, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the smtpungetc function in the Exim message delivery agent is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted request to the server...

DEBIAN-CVE-2020-28024

Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtpungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF...

Exim 缓冲区错误漏洞

Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding and delivering mail. Exim suffers from a buffer error vulnerability that stems from an integer underflow in the smtp ungetc function. An attacker could exploit this vulnerability to...