p PatchFirst

CVE-2024-31636

CVE-2024-31636

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.

CVSS 3.9 · Low · EPSS 0.2% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • lief Debian:12

    Versions
    • 0.9.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lief PyPI

    Versions
    • 0.10.0
    • 0.10.1
    • 0.11.0
    • 0.11.1
    • 0.11.2
    • 0.11.3
    • 0.11.4
    • 0.11.5
    • 0.12.0
    • 0.12.1
    • 0.12.2
    • 0.12.3
    • 0.13.0
    • 0.13.1
    • 0.13.2
    • 0.14.0
    • 0.14.1
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.8.3
    • 0.9.0
    Affected ranges
    • ECOSYSTEM: < 0.15.0

    Update to 0.15.0

  • lief PyPI

    Versions
    • 0.10.0
    • 0.10.1
    • 0.11.0
    • 0.11.1
    • 0.11.2
    • 0.11.3
    • 0.11.4
    • 0.11.5
    • 0.12.0
    • 0.12.1
    • 0.12.2
    • 0.12.3
    • 0.13.0
    • 0.13.1
    • 0.13.2
    • 0.14.0
    • 0.14.1
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.8.3
    • 0.9.0
    Affected ranges
    • ECOSYSTEM: ≤ 0.14.1

    No fix published

  • lief Ubuntu:20.04:LTS

    Versions
    • 0.9.0-1build1
    • 0.9.0-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • lief Ubuntu:22.04:LTS

    Versions
    • 0.9.0-1build2
    • 0.9.0-1build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →