CVE-2015-5147: Buffer Overflow
Published Jul 14, 2015
·Updated
Stack-based buffer overflow in the headeranchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Affected Software
1 affected component
Redcarpet Project Redcarpet<=3.3.1
Event History
Jul 14, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5147?
CVE-2015-5147 has a medium severity level due to the potential for denial of service and arbitrary code execution.
2
How do I fix CVE-2015-5147?
To mitigate CVE-2015-5147, upgrade Redcarpet to version 3.3.2 or later.
3
What impact does CVE-2015-5147 have on affected systems?
CVE-2015-5147 can lead to application crashes and may allow attackers to execute arbitrary code.
4
Which versions of Redcarpet are affected by CVE-2015-5147?
CVE-2015-5147 affects Redcarpet versions prior to 3.3.2.
5
Can CVE-2015-5147 lead to remote code execution?
Yes, CVE-2015-5147 may enable remote code execution under certain attack scenarios.