CVE-2017-7555
CriticalSummary
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. An attacker could send crafted strings that would cause the application using Augeas to copy past the end of a buffer, leading to a crash or possible code execution.
Risk Assessment
This vulnerability could lead to application crashes or allow an attacker to execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update Augeas to a version newer than 1.8.0 to mitigate this vulnerability and to conduct an audit of applications using this library.
Original NVD description (English source)
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.