9 matches found
CVE-2023-40294-and-CVE-2023-40295
제 환경에서 boron을 실행하던 중, 우연히 2개의 힙 버퍼 오버플로우를 발견했습니다. libboronlibboron.so.2 버전 2.0.8에서 약간 잘못된 형식의 입력을 처리할 때 발생했습니다. 이는 Mac x8664과 Linux x8664에서 공식적으로 테스트되었습니다: Files for reproduction reproduction.zip 컴파일 git clone https://github.com/0branch/boron.git cd boron ./configure && make sudo make install &&...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
Heap overflow
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294: Out-of-bounds Write
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
CVE-2023-40294
libboron in Boron 2.0.8 has a heap-based buffer overflow in urparseBlockI at iparseblk.c...
Boron Buffer Error Vulnerability
Boron is an interpreted, prototype-based scripting language from the personal developer Marc Simpson. A security vulnerability exists in Boron version 2.0.8, which stems from a buffer overflow vulnerability in urparseBlockI...
