PT-2024-10101
CVE-2024-53849
·
تاريخ النشر
2024-11-26
·
تاريخ التحديث
2024-12-18
الوصف من
CVSS 4.0
4.8
متوسطةالمقاييسAV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
editorconfig-core-c versions prior to 0.12.7
Description
The issue is related to buffer overflows in the EditorConfig core library written in C, which can occur when the input pattern contains many escaped characters, particularly in cases of nested brackets. This can lead to the remaining input length exceeding the output capacity. The problem has been addressed in release version 0.12.7. Users are advised to upgrade to this version to resolve the issue.
Recommendations
For versions prior to 0.12.7, upgrade to version 0.12.7 to resolve the issue.
At the moment, there is no information about other workarounds for this vulnerability.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾