Security vulnerabilities in version 4.2.3
This page lists all known and fixed security vulnerabilities in version 4.2.3 (back to the list of all versions).
Overview: 1 vulnerability
| WSA |
CVE |
Score |
Severity |
Issue |
Vulnerability type |
Scope |
Versions |
Fix
| Release date |
|
| WSA-2024-1 |
- |
3.8 |
|
Integer overflow in loops on lists. |
Integer Overflow or Wraparound |
Core, Plugins |
0.1.6 → 4.4.1 |
- |
- |
WSA-2024-1: [Core, Plugins] Integer overflow in loops on lists.
Vulnerability
AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
(
detail)
Integer Overflow or Wraparound
Affected versions
0.1.6 → 4.4.1
Fixed version
Not yet available, stay tuned!
Description
An integer overflow can happen when looping over items in a list.
This can only happen in rare conditions on 32 and 64-bit systems, as the list must contain more than 2,147,483,647 elements.
On 16-bit systems, this happens with a list that contains more than 32,767 elements.
Mitigation
There is no known mitigation.
The upgrade to the latest stable version is highly recommended.
Credit
The issue was discovered by Yiheng Cao.