CVE-2021-30027

概要

参考情報

• mity/md4c commit 4fc808d · Patch
• mity/md4c · Exploit

md4c のその他の脆弱性

• CVE-2020-26148高 7.5md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., as…
• CVE-2018-12112高 7.8md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) o…
• CVE-2018-12102中 5.5md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.
• CVE-2018-11547緊急 9.8md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination.
• CVE-2018-11546緊急 9.8md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.