Nixpkgs security tracker
8.4 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
9 packages
- cherrytree
- haskellPackages.polytree
- python312Packages.anytree
- python313Packages.anytree
- python314Packages.anytree
- haskellPackages.TernaryTrees
- python312Packages.textual-universal-directorytree
- python313Packages.textual-universal-directorytree
- python314Packages.textual-universal-directorytree
- @LeSuisse accepted
- @LeSuisse dismissed
yTree 1.94-1.1 Stack-Based Buffer Overflow
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.
References
-
ExploitDB-39406 exploit
-
Official Product Homepage product
-
VulnCheck Advisory: yTree 1.94-1.1 Stack-Based Buffer Overflow third-party-advisory
Affected products
- ==1.94-1.1
Matching in nixpkgs
Ignored packages (9)
pkgs.cherrytree
Hierarchical note taking application
pkgs.haskellPackages.polytree
A polymorphic rose-tree
pkgs.python312Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.python313Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.python314Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.haskellPackages.TernaryTrees
Efficient pure ternary tree Sets and Maps
pkgs.python312Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems
pkgs.python313Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems
pkgs.python314Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems