Buffer Overflow

2023-06-1302:53:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libeconf.so

buffer overflow

unchecked size

comment_before_key

application crash

software

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.1%

JSON

libeconf.so is vulnerable to Buffer Overflows. The vulnerability exists due to not checking the size of comment_before_key before copying into a buffer, which allows an attacker to cause an application crash by providing malformed configuration file.