redcarpet Buffer Overflow vulnerability

published 2015-07-14 11 y ago modified 2026-06-17 4 mo ago also GHSA-7322-9mx6-5j2m , EUVD-2018-0377

cvss: 7.5; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.5%; EPSS 2.5% chance of exploitation in 30 days, percentile 85%
public exploits: 0; none known

Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Patch / fix

fixed in 1 links 1

rubygems redcarpet 3.3.2

github.com/vmg/redcarpet@2cee777 commit

Exploit prediction

2.54% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected packages

ecosystem	package	affected	fixed in
rubygems	redcarpet	>=3.3.0, <3.3.2	3.3.2

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

github.com /vmg/redcarpet/commit/2cee777c1e5babe8a1e2683d31ea75cc4afe55fb
web
github.com /vmg/redcarpet/blob/master/CHANGELOG.md
web
openwall.com /lists/oss-security/2015/06/29/3
mailing-list, web
openwall.com /lists/oss-security/2015/06/30/10
mailing-list, web
securityfocus.com /bid/75508
vdb-entry
nvd.nist.gov /vuln/detail/CVE-2015-5147
advisory
github.com /vmg/redcarpet
package
web.archive.org /web/20150711061256/http://www.securityfocus.com/bid/75508
web

Sources

CVE List CVE-2015-5147
GitHub Advisory GHSA-7322-9mx6-5j2m
NVD CVE-2015-5147

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary