CVE-2021-33479 - log back

CVE-2021-33479 edited at 21 May 2021 08:43:19
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Arbitrary code execution
Description
+ A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=1962861
+ https://sourceforge.net/p/jocr/bugs/39/
+ https://sourceforge.net/p/jocr/bugs/39/attachment/stack-underflow-measure_pitch-pgm2asc-1689.zip
Notes
CVE-2021-33479 created at 21 May 2021 08:41:57