PT-2015-4922 · Debian+3 · Dpkg+3
Hanno Böck
·
Publicado
2015-09-14
·
Atualizado
2017-07-01
·
CVE-2015-0860
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Debian dpkg versions 1.16.x through 1.16.16
Debian dpkg versions 1.17.x through 1.17.25
Description
The issue is caused by an off-by-one error in the
extracthalf function, which can lead to a stack-based buffer overflow. This can be triggered by the archive magic version number in an "old-style" Debian binary package.Recommendations
For Debian dpkg versions 1.16.x through 1.16.16, update to version 1.16.17 or later.
For Debian dpkg versions 1.17.x through 1.17.25, update to version 1.17.26 or later.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Dpkg