CVE-2015-5147

CVE-2015-5147

EPSS 2.5%

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md http://www.openwall.com/lists/oss-security/2015/06/29/3 http://www.openwall.com/lists/oss-security/2015/06/30/10 http://www.securityfocus.com/bid/75508