PT-2015-7934 · Unknown · Exfat-Utils

Publicado 2015-11-02 · Atualizado 2015-11-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions exfat-utils (affected versions not specified)

Description The issue concerns a collection of tools for working with the exFAT filesystem. Fuzzing with american fuzzy lop revealed a write heap overflow and an endless loop in exfatfsck. Systems that automatically run filesystem checks on external devices are especially at risk. A malformed input can cause a write heap overflow in the verify vbr checksum function, potentially allowing code execution. Another malformed input can cause an endless loop, leading to a possible denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0422

Produtos afetados

Exfat-Utils

Referências · 4

• http://openwall.com/lists/oss-security/2015/10/24/1 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0422 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17013 · Nota
• https://advisories.mageia.org/MGASA-2015-0422.html · Nota de Segurança