CVE-2024-40897: Buffer Overflow
Last updated 1 October 2024
Other sources
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40897?
CVE-2024-40897 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-40897?
To fix CVE-2024-40897, upgrade to ORC version 0.4.40 or later.
What software is affected by CVE-2024-40897?
CVE-2024-40897 affects ORC versions prior to 0.4.39.
What type of vulnerability is CVE-2024-40897?
CVE-2024-40897 is a stack-based buffer overflow vulnerability.
What could happen if CVE-2024-40897 is exploited?
Exploitation of CVE-2024-40897 could allow an attacker to execute arbitrary code on the developer's build environment.