TI-2017-02028 CVE-2017-2807 · GHSA-59vm-28w2-496w
Memory corruption in Ledger CLI
Priority LOW 38
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1.
Ledger-cli
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Ledger-cli records in CISA KEVNo Ledger-cli vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Ledger · all components
TI-2017-09217 CVE-2017-12482 · GHSA-m984-8226-v2pj
The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote…
Priority LOW 37
The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact…
TI-2017-09216 CVE-2017-12481 · GHSA-5fcm-3wm8-28vv
The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a…
Priority LOW 37
The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
TI-2017-02029 CVE-2017-2808 · GHSA-9329-p7mv-f8p5
Use after free in Ledger CLI
Priority LOW 37
An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1.