High CVE-2015-5147 EUVD-2018-0377GHSA-7322-9mx6-5j2m

redcarpet Buffer Overflow vulnerability

Published Jul 14, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
RubyGems	redcarpet	>= 3.3.0, < 3.3.2	3.3.2	GHSA-7322-9mx6-5j2m

References

https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md
[oss-security] 20150629 CVE request: Stack overflow in redcarpet's header_anchor mailing-list
[oss-security] 20150630 Re: CVE request: Stack overflow in redcarpet's header_anchor mailing-list
75508 vdb-entry