Every CVE Search/ Get API key

CVE-2017-2807

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger...

7.5 HighFix available

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.97%Down 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
CVE-2017-2807
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2017-11950 7.5

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
EUVD-2017-11950
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-59vm-28w2-496w 7.8

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger...

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
GHSA-59vm-28w2-496w
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
NVD 7.5

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
CVE-2017-2807
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
OSV 7.8

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
CVE-2017-2807
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-2807 7.8

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
DEBIAN-CVE-2017-2807
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2017-2807 7.5

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer underflow resulting in code execution. An attacker can construct a malicious journal file to trigger this vulnerability.

Record
UBUNTU-CVE-2017-2807
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2019:1779-1 No score

Security update for ledger

This update for ledger fixes the following issues:

ledger was updated to 3.1.3:

  • Properly reject postings with a comment right after the flag (bug #1753)
  • Make sorting order of lot information deterministic (bug #1747)
  • Fix bug in tag value parsing (bug #1702)
  • Remove the org command, which was always a hack to begin with (bug #1706)
  • Provide Docker information in README
  • Various small documentation improvements

This also includes the update to 3.1.2:

  • Increase maximum length for regex from 255 to 4095 (bug #981)
  • Initialize periods from from/since clause rather than earliest transaction date (bug #1159)
  • Check balance assertions against the amount after the posting (bug #1147)
  • Allow balance assertions with multiple posts to same account (bug #1187)
  • Fix period duration of 'every X days' and similar statements (bug #370)
  • Make option --force-color not require --color anymore (bug #1109)
  • Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  • Add support for --prepend-format in accounts command
  • Fix handling of edge cases in trim function (bug #520)
  • Fix auto xact posts not getting applied to account total during journal parse (bug #552)
  • Transfer null_post flags to generated postings
  • Fix segfault when using --market with --group-by
  • Use amount_width variable for budget report
  • Keep pending items in budgets until the last day they apply
  • Fix bug where .total used in value expressions breaks totals
  • Make automated transactions work with assertions (bug #1127)
  • Improve parsing of date tokens (bug #1626)
  • Don't attempt to invert a value if it's already zero (bug #1703)
  • Do not parse user-specified init-file twice
  • Fix parsing issue of effective dates (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  • Fix use-after-free issue with deferred postings (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  • Fix possible stack overflow in option parsing routine (bug #1222, CVE-2017-12481)
  • Fix possible stack overflow in date parsing routine (bug #1224, CVE-2017-12482)
  • Fix use-after-free when using --gain (bug #541)
  • Python: Removed double quotes from Unicode values.
  • Python: Ensure that parse errors produce useful RuntimeErrors
  • Python: Expose journal expand_aliases
  • Python: Expose journal_t::register_account
  • Improve bash completion
  • Emacs Lisp files have been moved to https://github.com/ledger/ledger-mode
  • Various documentation improvements
Record
openSUSE-SU-2019:1779-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1895-1 No score

Security update for ledger

This update for ledger fixes the following issues:

ledger was updated to 3.1.3:

  • Properly reject postings with a comment right after the flag (bug #1753)
  • Make sorting order of lot information deterministic (bug #1747)
  • Fix bug in tag value parsing (bug #1702)
  • Remove the org command, which was always a hack to begin with (bug #1706)
  • Provide Docker information in README
  • Various small documentation improvements

This also includes the update to 3.1.2:

  • Increase maximum length for regex from 255 to 4095 (bug #981)
  • Initialize periods from from/since clause rather than earliest transaction date (bug #1159)
  • Check balance assertions against the amount after the posting (bug #1147)
  • Allow balance assertions with multiple posts to same account (bug #1187)
  • Fix period duration of 'every X days' and similar statements (bug #370)
  • Make option --force-color not require --color anymore (bug #1109)
  • Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting.
  • Add support for --prepend-format in accounts command
  • Fix handling of edge cases in trim function (bug #520)
  • Fix auto xact posts not getting applied to account total during journal parse (bug #552)
  • Transfer null_post flags to generated postings
  • Fix segfault when using --market with --group-by
  • Use amount_width variable for budget report
  • Keep pending items in budgets until the last day they apply
  • Fix bug where .total used in value expressions breaks totals
  • Make automated transactions work with assertions (bug #1127)
  • Improve parsing of date tokens (bug #1626)
  • Don't attempt to invert a value if it's already zero (bug #1703)
  • Do not parse user-specified init-file twice
  • Fix parsing issue of effective dates (bug #1722, TALOS-2017-0303, CVE-2017-2807)
  • Fix use-after-free issue with deferred postings (bug #1723, TALOS-2017-0304, CVE-2017-2808)
  • Fix possible stack overflow in option parsing routine (bug #1222, CVE-2017-12481)
  • Fix possible stack overflow in date parsing routine (bug #1224, CVE-2017-12482)
  • Fix use-after-free when using --gain (bug #541)
  • Python: Removed double quotes from Unicode values.
  • Python: Ensure that parse errors produce useful RuntimeErrors
  • Python: Expose journal expand_aliases
  • Python: Expose journal_t::register_account
  • Improve bash completion
  • Emacs Lisp files have been moved to https://github.com/ledger/ledger-mode
  • Various documentation improvements

This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2019:1895-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10913-1 No score

ledger-3.2.1-3.3 on GA media

These are all security issues fixed in the ledger-3.2.1-3.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10913-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ledger
Debian:12
 before 3.1.2+dfsg1-1
3.1.2+dfsg1-1
ledger
Debian:13
 before 3.1.2+dfsg1-1
3.1.2+dfsg1-1
ledger
Debian:14
 before 3.1.2+dfsg1-1
3.1.2+dfsg1-1
ledger
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.1+dfsg1-53.1+dfsg1-63.1+dfsg1-73.1.1+dfsg1-1
 None known
ledger
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.1.2~pre1+g3a00e1c+dfsg1-53.1.2~pre1+g3a00e1c+dfsg1-5build13.1.2~pre1+g3a00e1c+dfsg1-5build23.1.2~pre1+g3a00e1c+dfsg1-5build33.1.2~pre1+g3a00e1c+dfsg1-5build43.1.2~pre1+g3a00e1c+dfsg1-5build5
 None known
ledger
openSUSE:Leap 15.0
 before 3.1.3-lp151.3.3.1
3.1.3-lp151.3.3.1
ledger
openSUSE:Leap 15.1
 before 3.1.3-lp151.3.3.1
3.1.3-lp151.3.3.1
ledger
SUSE:Package Hub 15 SP1
 before 3.1.3-bp151.4.3.1
3.1.3-bp151.4.3.1
ledger
openSUSE:Tumbleweed
 before 3.2.1-3.3
3.2.1-3.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-2807 is a high vulnerability (CVSS 7.5) in Ledger Cli, published September 5, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in ledger 3.1.2+dfsg1-1.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open