Lucene search
Veracode Vulnerability DatabaseVERACODE:26851HistorySep 21, 2020 - 6:21 a.m.
Arbitrary Code Execution
2020-09-2106:21:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.004 Low
EPSS
Percentile
74.8%
ledger is vulnerable to arbitrary code execution. The vulnerability exists through an exploitable buffer overflow vulnerability exists in the tag parsing functionality through a malicious journal file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ledger:eoan | eq | 3.1.2+dfsg1 | |
| ledger:eoan | eq | 3.1.2+dfsg1 |
Related
talos
talos
Ledger CLI Tags Parsing Code Execution Vulnerability
2017-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2017-2807
2017-09-05 00:00:00
cvelist
cvelist
CVE-2017-2807
2017-08-30 00:00:00
debiancve
debiancve
CVE-2017-2807
2017-09-05 18:29:00
osv
osv
CVE-2017-2807
2017-09-05 18:29:00
nvd
nvd
CVE-2017-2807
2017-09-05 18:29:00
cve
cve
CVE-2017-2807
2017-09-05 18:29:00
seebug
seebug
Ledger CLI Tags Parsing Code Execution Vulnerability(CVE-2017-2807)
2017-09-12 00:00:00
prion
prion
Integer overflow
2017-09-05 18:29:00
freebsd
freebsd
ledger -- multiple vulnerabilities
2017-09-05 00:00:00
nessus
nessus
FreeBSD : ledger -- multiple vulnerabilities (d843a984-7f22-484f-ba81-483ddbe30dc3)
2017-09-27 00:00:00
openSUSE Security Update : ledger (openSUSE-2019-1779)
2019-07-22 00:00:00
GLSA-202004-05 : ledger: Multiple vulnerabilities
2020-04-02 00:00:00
suse
suse
Security update for ledger (moderate)
2019-08-14 00:00:00
Security update for ledger (moderate)
2019-07-21 00:00:00
gentoo
gentoo
ledger: Multiple vulnerabilities
2020-04-01 00:00:00
openvas
openvas
openSUSE: Security Advisory for ledger (openSUSE-SU-2019:1779-1)
2019-07-22 00:00:00