GHSA-475j-wc37-6274: Several stack buffer overflows and pointer overflows in editorconfig-core-c

Q: What input is required to trigger the overflows?

The issue is triggered while processing an input pattern containing many escaped characters in a switch case for '['. Nested brackets can cause added backslashes to consume output-buffer space until the remaining input exceeds the output capacity.

Q: Is an attacker required to have remote access or user interaction?

The supplied CVSS vector indicates local attack access, low attack complexity, low privileges required, and no user interaction. The description does not identify a remote attack path.

Q: Which version fixes the issue?

Release 0.12.7 addresses the overflows. Users of affected versions are advised to upgrade to that release or a later version.

Q: Are there mitigations if upgrading is not immediately possible?

No known workarounds are provided in the vulnerability data. The stated remediation is to upgrade.

Published Nov 26, 2024

Updated

editorconfig-core-c is theEditorConfig core library written in C (for use by plugins supporting EditorConfig parsing). In affected versions several overflows may occur in switch case '[' when the input pattern contains many escaped characters. The added backslashes leave too little space in the output pattern when processing nested brackets such that the remaining input length exceeds the output capacity. This issue has been addressed in release version 0.12.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected Software

1 affected component

editorconfig editorconfig-core-c<0.12.7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade editorconfig-core-c to a version that resolves this vulnerability.
Fixed in 0.12.7

Event History

Nov 26, 2024

CVE Published

via OSV·11:34 PM

Data Sourced

via OSV·11:34 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What input is required to trigger the overflows?

The issue is triggered while processing an input pattern containing many escaped characters in a switch case for '['. Nested brackets can cause added backslashes to consume output-buffer space until the remaining input exceeds the output capacity.

Is an attacker required to have remote access or user interaction?

The supplied CVSS vector indicates local attack access, low attack complexity, low privileges required, and no user interaction. The description does not identify a remote attack path.

Which version fixes the issue?

Release 0.12.7 addresses the overflows. Users of affected versions are advised to upgrade to that release or a later version.

Are there mitigations if upgrading is not immediately possible?

No known workarounds are provided in the vulnerability data. The stated remediation is to upgrade.

GHSA-475j-wc37-6274: Several stack buffer overflows and pointer overflows in editorconfig-core-c

Affected Software

Remediation

Event History

Frequently Asked Questions

What input is required to trigger the overflows?

Is an attacker required to have remote access or user interaction?

Which version fixes the issue?

Are there mitigations if upgrading is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

What input is required to trigger the overflows?

Is an attacker required to have remote access or user interaction?

Which version fixes the issue?

Are there mitigations if upgrading is not immediately possible?