CVE-2015-5147

Description

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

References

https://github.com/advisories/GHSA-7322-9mx6-5j2m

https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0377

http://www.securityfocus.com/bid/75508

http://www.openwall.com/lists/oss-security/2015/06/30/10

http://www.openwall.com/lists/oss-security/2015/06/29/3

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS