CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially craft...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2024-40897 orc Corrigé dans: 0.4.39-r0
Debian DEBIAN-CVE-2024-40897 orc

Références

advisory github.com
advisory nvd.nist.gov
package github.com
web openwall.com
web gstreamer.freedesktop.org
web jvn.jp