Lucene search
MitreCVELIST:CVE-2020-23856HistoryMay 18, 2021 - 2:41 p.m.
CVE-2020-23856
2021-05-1814:41:03
mitre
www.cve.org
6
cflow
use-after-free
vulnerability
denial of service
pointer variable
Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
References
github.com/yangjiageng/PoC/blob/master/PoC_cflow_uaf_parser_line1284
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLSXGFK2NYPCJMPHSHE3W56ZU3ZO6RD7/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZTTKZX274BVFZX7TMPEZG6UWL6UPMQF/
lists.gnu.org/archive/html/bug-cflow/2020-07/msg00000.html
Related
openvas
openvas
Fedora: Security Advisory for cflow (FEDORA-2021-e8cab459ab)
2021-06-03 00:00:00
Fedora: Security Advisory for cflow (FEDORA-2021-6ef76430d0)
2021-06-03 00:00:00
debiancve
debiancve
CVE-2020-23856
2021-05-18 15:15:07
prion
prion
Design/Logic Flaw
2021-05-18 15:15:00
fedora
fedora
[SECURITY] Fedora 33 Update: cflow-1.6-8.fc33
2021-06-01 01:05:51
[SECURITY] Fedora 34 Update: cflow-1.6-8.fc34
2021-06-01 01:04:18
ubuntucve
ubuntucve
CVE-2020-23856
2021-05-18 00:00:00
cve
cve
CVE-2020-23856
2021-05-18 15:15:07
nvd
nvd
CVE-2020-23856
2021-05-18 15:15:07
veracode
veracode
Denial Of Service (DoS)
2021-12-31 22:04:53