漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
editorconfig-core-c has incomplete fix for CVE-2023-0341
Vulnerability Description
editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ec_glob() that allows an attacker to crash any application using libeditorconfig by providing a specially crafted directory structure and .editorconfig file. This is an incomplete fix for CVE-2023-0341. The pcre_str buffer was protected in 0.12.6 but the adjacent l_pattern[8194] stack buffer received no equivalent protection. On Ubuntu 24.04, FORTIFY_SOURCE converts the overflow to SIGABRT (DoS). Version 0.12.11 contains an updated fix.
CVSS Information
N/A
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
EditorConfig 安全漏洞
Vulnerability Description
EditorConfig是EditorConfig开源的一个应用程序。使得在不同的文本编辑器和不同的项目之间切换时，可以轻松地保持正确的编码样式。 EditorConfig 0.12.10及之前版本存在安全漏洞，该漏洞源于ec_glob函数存在基于栈的缓冲区溢出，可能导致应用程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A