Nixpkgs security tracker
8.4 HIGH
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
yTree 1.94-1.1 Stack-Based Buffer Overflow
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code in the application context.
References
-
ExploitDB-39406 exploit
-
Official Product Homepage product
-
VulnCheck Advisory: yTree 1.94-1.1 Stack-Based Buffer Overflow third-party-advisory
Affected products
- ==1.94-1.1
Matching in nixpkgs
pkgs.ytree
Curses-based file manager similar to DOS Xtree(TM)
pkgs.cherrytree
Hierarchical note taking application
pkgs.haskellPackages.polytree
A polymorphic rose-tree
pkgs.python312Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.python313Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.python314Packages.anytree
Powerful and Lightweight Python Tree Data Structure
pkgs.haskellPackages.TernaryTrees
Efficient pure ternary tree Sets and Maps
pkgs.python312Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems
pkgs.python313Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems
pkgs.python314Packages.textual-universal-directorytree
Textual plugin for a DirectoryTree compatible with remote filesystems
Package maintainers
-
@figsoda figsoda <figsoda@pm.me>