| Package | Affected versions | Patched versions |
|---|---|---|
| swi-prolog | = 5.10.0= 5.10.1= 5.10.2= 5.10.3= 5.10.4= 5.10.5= 5.6.50= 5.6.51= 5.6.52= 5.6.53= 5.6.54= 5.6.55= 5.6.56= 5.6.57= 5.6.58= 5.6.59= 5.6.61= 5.6.62= 5.6.63= 5.6.64= 5.8.0= 5.8.1= 5.8.2= 5.8.3= 6.0.0= 6.0.1= 6.0.2= 6.2.0= 6.2.1= 6.2.2= 6.2.3= 6.3.0= 6.3.1= 6.3.2= 6.3.3= 6.3.4= 6.3.5= 6.3.6≤ 6.2.4 |
Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free