CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0341

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over the p_pcre buffer.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.0%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2023-0341

Editorconfig » Editorconfig » Version: 0.10.0

cpe:2.3:a:editorconfig:editorconfig:0.10.0
Editorconfig » Editorconfig » Version: 0.11.0

cpe:2.3:a:editorconfig:editorconfig:0.11.0
Editorconfig » Editorconfig » Version: 0.11.3

cpe:2.3:a:editorconfig:editorconfig:0.11.3
Editorconfig » Editorconfig » Version: 0.11.4

cpe:2.3:a:editorconfig:editorconfig:0.11.4
Editorconfig » Editorconfig » Version: 0.11.5

cpe:2.3:a:editorconfig:editorconfig:0.11.5
Editorconfig » Editorconfig » Version: 0.12.0

cpe:2.3:a:editorconfig:editorconfig:0.12.0
Editorconfig » Editorconfig » Version: 0.12.1

cpe:2.3:a:editorconfig:editorconfig:0.12.1
Editorconfig » Editorconfig » Version: 0.12.2

cpe:2.3:a:editorconfig:editorconfig:0.12.2
Editorconfig » Editorconfig » Version: 0.12.3

cpe:2.3:a:editorconfig:editorconfig:0.12.3
Editorconfig » Editorconfig » Version: 0.12.4

cpe:2.3:a:editorconfig:editorconfig:0.12.4
Editorconfig » Editorconfig » Version: 0.12.5

cpe:2.3:a:editorconfig:editorconfig:0.12.5
Editorconfig » Editorconfig » Version: 0.8.0

cpe:2.3:a:editorconfig:editorconfig:0.8.0
Editorconfig » Editorconfig » Version: 0.9.0

cpe:2.3:a:editorconfig:editorconfig:0.9.0
Editorconfig » Editorconfig » Version: 0.9.1

cpe:2.3:a:editorconfig:editorconfig:0.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0341

Products

Pricing

Contact Us