Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a use-after-free vulnerability resulting in arbitrary code execution. An attacker can convince a user to load a journal file to trigger this vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ledger-CLI账户解析组件安全漏洞
Vulnerability Description
Ledger是由软件开发者John Wiegley编写的一套支持UNIX命令的会计系统。Ledger-CLI是其中的一个命令行程序。account parsing component是其中的一个账号解析组件。 Ledger-CLI 3.1.1版本中的账户解析组件存在释放后重用漏洞。远程攻击者可通过诱使用户加载journal文件利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A