CVE-2022-4969 - bwoodsend rockhopper Binary Parser ragged_array.c count_rows buffer overflow

Back Back to CVE browser

MEDIUM

bwoodsend rockhopper Binary Parser ragged_array.c count_rows buffer overflow

Published May 27, 2024

4.8

MEDIUM

CVSS 4.0

EPSS 0.23%

Description

A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function count_rows of the file rockhopper/src/ragged_array.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local access is required to approach this attack. Upgrading to version 0.2.0 is able to address this issue. The name of the patch is 1a15fad5e06ae693eb9b8908363d2c8ef455104e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-266312.

Affected products

Vendor Bwoodsend Product Rockhopper Default
n/a
- Version
  0.1.0
  Status
  affected
  Constraints
  -
- Version
  0.1.1
  Status
  affected
  Constraints
  -
- Version
  0.1.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bwoodsend

Rockhopper

n/a

Version	Status	Constraints
0.1.0	affected	-
0.1.1	affected	-
0.1.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (6)

https://github.com/advisories/GHSA-4r4c-66gf-g9g5
Advisory
https://github.com/bwoodsend/rockhopper/commit/1a15fad5e06ae693eb9b8908363d2c8ef455104e
patch
https://github.com/bwoodsend/rockhopper/releases/tag/v0.2.0
patch
https://nvd.nist.gov/vuln/detail/CVE-2022-4969
https://vuldb.com/?ctiid.266312
signaturepermissions-required
https://vuldb.com/?id.266312
vdb-entrytechnical-description

Link	Providers	Tags
https://github.com/advisories/GHSA-4r4c-66gf-g9g5		Advisory
https://github.com/bwoodsend/rockhopper/commit/1a15fad5e06ae693eb9b8908363d2c8ef455104e		patch
https://github.com/bwoodsend/rockhopper/releases/tag/v0.2.0		patch
https://nvd.nist.gov/vuln/detail/CVE-2022-4969
https://vuldb.com/?ctiid.266312		signaturepermissions-required
https://vuldb.com/?id.266312		vdb-entrytechnical-description