![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2023-24056 |
Description: | In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes. |
Test IDs: | 1.3.6.1.4.1.25623.1.1.2.2023.1534 1.3.6.1.4.1.25623.1.1.2.2023.2058 1.3.6.1.4.1.25623.1.1.2.2023.1604 1.3.6.1.4.1.25623.1.1.2.2023.1559 1.3.6.1.4.1.25623.1.1.2.2023.2023 1.3.6.1.4.1.25623.1.1.2.2023.1876 1.3.6.1.4.1.25623.1.1.2.2023.1851 1.3.6.1.4.1.25623.1.1.10.2023.0077 1.3.6.1.4.1.25623.1.1.2.2023.2002 1.3.6.1.4.1.25623.1.1.2.2023.1787 1.3.6.1.4.1.25623.1.1.2.2023.2110 1.3.6.1.4.1.25623.1.1.2.2023.2244 1.3.6.1.4.1.25623.1.1.2.2023.1765 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2023-24056 https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059 https://github.com/pkgconf/pkgconf/tags https://nullprogram.com/blog/2023/01/18/ |