CVE-2020-23856

Published: May 18, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://lists.gnu.org/archive/html/bug-cflow/2020-07/msg00000.html

x_refsource_MISC

https://github.com/yangjiageng/PoC/blob/master/PoC_cflow_uaf_parser_line1284

x_refsource_MISC

FEDORA-2021-e8cab459ab

vendor-advisory

x_refsource_FEDORA

FEDORA-2021-6ef76430d0

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-23856

Description

Affected Products

References