diff options
| author | Jason E. Hale <jhale@FreeBSD.org> | 2024-02-12 00:55:07 +0000 |
|---|---|---|
| committer | Jason E. Hale <jhale@FreeBSD.org> | 2024-02-12 00:55:07 +0000 |
| commit | 221e9b766775c5265d3000c627ba9ce9ececd350 (patch) | |
| tree | e8d0b491d4d2518a101ec8ade4a1e777acb3c95d | |
| parent | cfee643c226fc1242ee11367ab6efb503a8b2d62 (diff) | |
| download | ports-221e9b766775c5265d3000c627ba9ce9ececd350.tar.gz ports-221e9b766775c5265d3000c627ba9ce9ececd350.zip | |
security/vuxml: Document vulnerability in readstat
| -rw-r--r-- | security/vuxml/vuln/2024.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index a1792f558f35..e1ad65db1d8b 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,30 @@ + <vuln vid="388eefc0-c93f-11ee-92ce-4ccc6adda413"> + <topic>readstat -- Heap buffer overflow in readstat_convert</topic> + <affects> + <package> + <name>readstat</name> + <range><lt>1.1.9</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Google reports:</p> + <blockquote cite="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33991"> + <p>A heap buffer overflow exists in readstat_convert.</p> + </blockquote> + </body> + </description> + <references> + <url>https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33991</url> + <url>https://osv.dev/vulnerability/OSV-2021-732</url> + <url>https://github.com/WizardMac/ReadStat/issues/285</url> + </references> + <dates> + <discovery>2021-05-05</discovery> + <entry>2024-02-12</entry> + </dates> + </vuln> + <vuln vid="cb22a9a6-c907-11ee-8d1c-40b034429ecf"> <topic>p5-Spreadsheet-ParseExcel -- Remote Code Execution Vulnerability</topic> <affects> |