GHSA-6cmp-qv2f-x97x
Velocidex Velociraptor has an off-by-one error
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | www.velocidex.com/golang/velociraptor | < 0.76.5 | 0.76.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.
References
External links from the advisory. They lead to third-party sites.