Описание
A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| openbabel | fixed | 3.2.0+dfsg-1~exp | experimental | package |
| openbabel | unfixed | package | ||
| openbabel | no-dsa | trixie | package | |
| openbabel | no-dsa | bookworm | package | |
| openbabel | postponed | bullseye | package |
Примечания
https://github.com/openbabel/openbabel/issues/2831
EPSS
Связанные уязвимости
A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.
A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
Уязвимость функции ChemKinFormat::CheckSpecies программного обеспечения преобразования форматов файлов химических веществ Open Babel, позволяющая нарушителю вызвать отказ в обслуживании
EPSS