| शीर्षक | cflow 1.7 has a stack-overflow at src/parser.c because of recursive call of void func_body() and void parse_variable_declaration(Ident *ident, int parm) |
|---|
| विवरण | There exists stack-overflow because of recursive call of void func_body() and void parse_variable_declaration(Ident *ident, int parm) at cflow-1.7/src/parser.c. This vulnerability may lead to denial of service (DoS) attacks and execution of malicious code. The details are in https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/cflow/stack-overflow/parser.c/README.md. I have informed the vendor:https://savannah.gnu.org/bugs/?64119. |
|---|
| स्रोत | ⚠️ https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/cflow/stack-overflow/parser.c/README.md |
|---|
| उपयोगकर्ता | DaisyPo (UID 45463) |
|---|
| सबमिशन | 27/04/2023 04:34 PM (3 साल पहले) |
|---|
| संयम | 18/05/2023 02:03 PM (21 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 229373 [GNU cflow 1.7 parser.c func_body/parse_variable_declaration सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|