Suggestions search

Untriaged

Filter by:

With package: haskellPackages.storable-enum

Found 2 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-57433

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value. A crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.

References

Affected products

Storable

<3.41

Matching in nixpkgs

pkgs.haskellPackages.c-storable

CStorable class

nixos-unstable 0.3
- nixpkgs-unstable 0.3
- nixos-unstable-small 0.3
nixos-26.05 0.3
- nixos-26.05-small 0.3
- nixpkgs-26.05-darwin 0.3

pkgs.haskellPackages.storable-enum

Wrapper that makes any Enum type Storable

nixos-unstable 0.0
- nixpkgs-unstable 0.0
- nixos-unstable-small 0.0
nixos-26.05 0.0
- nixos-26.05-small 0.0
- nixpkgs-26.05-darwin 0.0

pkgs.haskellPackages.storable-tuple

Storable instance for pairs and triples

nixos-unstable 0.1
- nixpkgs-unstable 0.1
- nixos-unstable-small 0.1
nixos-26.05 0.1
- nixos-26.05-small 0.1
- nixpkgs-26.05-darwin 0.1

pkgs.haskellPackages.storablevector

Fast, packed, strict storable arrays with a list interface like ByteString

nixos-unstable 0.2.13.2
- nixpkgs-unstable 0.2.13.2
- nixos-unstable-small 0.2.13.2
nixos-26.05 0.2.13.2
- nixos-26.05-small 0.2.13.2
- nixpkgs-26.05-darwin 0.2.13.2

pkgs.haskellPackages.derive-storable

Derive Storable instances with GHC.Generics.

nixos-unstable 0.3.1.0
- nixpkgs-unstable 0.3.1.0
- nixos-unstable-small 0.3.1.0
nixos-26.05 0.3.1.0
- nixos-26.05-small 0.3.1.0
- nixpkgs-26.05-darwin 0.3.1.0

pkgs.haskellPackages.storable-endian

Storable instances with endianness

nixos-unstable 0.2.6.1
- nixpkgs-unstable 0.2.6.1
- nixos-unstable-small 0.2.6.1
nixos-26.05 0.2.6.1
- nixos-26.05-small 0.2.6.1
- nixpkgs-26.05-darwin 0.2.6.1

pkgs.haskellPackages.storable-record

Elegant definition of Storable instances for records

nixos-unstable 0.0.7
- nixpkgs-unstable 0.0.7
- nixos-unstable-small 0.0.7
nixos-26.05 0.0.7
- nixos-26.05-small 0.0.7
- nixpkgs-26.05-darwin 0.0.7

pkgs.haskellPackages.storable-complex

Storable instance for Complex

nixos-unstable 0.2.3.0
- nixpkgs-unstable 0.2.3.0
- nixos-unstable-small 0.2.3.0
nixos-26.05 0.2.3.0
- nixos-26.05-small 0.2.3.0
- nixpkgs-26.05-darwin 0.2.3.0

pkgs.haskellPackages.storable-generic

Derive Storable instances with GHC.Generics

nixos-unstable 0.1.0.5
- nixpkgs-unstable 0.1.0.5
- nixos-unstable-small 0.1.0.5
nixos-26.05 0.1.0.5
- nixos-26.05-small 0.1.0.5
- nixpkgs-26.05-darwin 0.1.0.5

pkgs.haskellPackages.storable-peek-poke

class Sizable, Peek and Poke

nixos-unstable 0.1.0.2
- nixpkgs-unstable 0.1.0.2
- nixos-unstable-small 0.1.0.2
nixos-26.05 0.1.0.2
- nixos-26.05-small 0.1.0.2
- nixpkgs-26.05-darwin 0.1.0.2

pkgs.haskellPackages.c-storable-deriving

Generate C-like storable instances from datatypes

nixos-unstable 0.1.3
- nixpkgs-unstable 0.1.3
- nixos-unstable-small 0.1.3
nixos-26.05 0.1.3
- nixos-26.05-small 0.1.3
- nixpkgs-26.05-darwin 0.1.3

pkgs.haskellPackages.storable-hetero-list

about Storable and Hetero list

nixos-unstable 0.1.0.4
- nixpkgs-unstable 0.1.0.4
- nixos-unstable-small 0.1.0.4
nixos-26.05 0.1.0.4
- nixos-26.05-small 0.1.0.4
- nixpkgs-26.05-darwin 0.1.0.4

pkgs.haskellPackages.heph-aligned-storable

Generically derive Storable instances suitable for CPU-GPU transfer

nixos-unstable 0.1.0.0
- nixpkgs-unstable 0.1.0.0
- nixos-unstable-small 0.1.0.0
nixos-26.05 0.1.0.0
- nixos-26.05-small 0.1.0.0
- nixpkgs-26.05-darwin 0.1.0.0

pkgs.haskellPackages.storablevector-carray

Conversion between storablevector and carray

nixos-unstable 0.0
- nixpkgs-unstable 0.0
- nixos-unstable-small 0.0
nixos-26.05 0.0
- nixos-26.05-small 0.0
- nixpkgs-26.05-darwin 0.0

pkgs.haskellPackages.hsndfile-storablevector

Haskell bindings for libsndfile (Data.StorableVector interface)

nixos-unstable 0.5.2
- nixpkgs-unstable 0.5.2
- nixos-unstable-small 0.5.2
nixos-26.05 0.5.2
- nixos-26.05-small 0.5.2
- nixpkgs-26.05-darwin 0.5.2

pkgs.haskellPackages.foreign-storable-asymmetric

Types and instances for implementing a Storable with different peek and poke

nixos-unstable 0.0.1
- nixpkgs-unstable 0.0.1
- nixos-unstable-small 0.0.1
nixos-26.05 0.0.1
- nixos-26.05-small 0.0.1
- nixpkgs-26.05-darwin 0.0.1

Package maintainers

@thielema Henning Thielemann <nix@henning-thielemann.de>

Permalink CVE-2017-20230

10.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months ago Activity log

Created suggestion 4 months ago

Storable versions before 3.05 for Perl has a stack overflow

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.