CVE-2017-12482 | BDVDB-2026-88465 Detail

Description#

The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugs.ledger-cli.org/show_bug.cgi?id=1224
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00031.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00029.html
https://security.gentoo.org/glsa/202004-05

Exploit#

No public exploit known

History#

Version 12017-08-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.