Search for packages
| purl | pkg:deb/debian/pev@0.80-4 |
| Next non-vulnerable version | 0.81-3+deb11u1 |
| Latest non-vulnerable version | 0.81-3+deb11u1 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8dzf-qjps-6qed
Aliases: CVE-2021-45423 |
A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allocated on the stack using exp->NumberOfFunctions as its size. However, the loop uses exp->NumberOfNames to iterate over it and set its components value. Therefore, the loop code assumes that exp->NumberOfFunctions is greater than ordinal at each iteration. This can lead to arbitrary code execution. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-13T07:47:44.951971+00:00 | Debian Oval Importer | Affected by | VCID-8dzf-qjps-6qed | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.6.0 |