CVE-2023-40294-and-CVE-2023-40295

私の環境で boron を実行していたところ、わずかに不正な入力を処理する際に、libboron libboron.so.2 バージョン 2.0.8 に2つのヒープバッファオーバーフローを発見しました。 これは Mac x8664 と Linux x8664 の両方で公式にテストされています: 再現用ファイル reproduction.zip コンパイル git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install && sudo ldconfig...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

Heap overflow

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

Boron Buffer Error Vulnerability

Boron is an interpreted, prototype-based scripting language from the personal developer Marc Simpson. A security vulnerability exists in Boron version 2.0.8, which stems from a buffer overflow vulnerability in urparseBlockI...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...

CVE-2023-40294

libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...