CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially craft...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Alpine Linux ALPINE-CVE-2024-40897 orc 修正版: 0.4.39-r0
Debian DEBIAN-CVE-2024-40897 orc

参照URL

advisory github.com
advisory nvd.nist.gov
package github.com
web openwall.com
web gstreamer.freedesktop.org
web jvn.jp