CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially craft...

Original description

The description as published by the source.

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2024-40897 orc Fixed in: 0.4.39-r0
Debian DEBIAN-CVE-2024-40897 orc

References

advisory github.com
advisory nvd.nist.gov
package github.com
web openwall.com
web gstreamer.freedesktop.org
web jvn.jp