PT-2015-7942 · M2Crypto · M2Crypto

Publicado 2015-11-26 · Atualizado 2015-11-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions m2crypto (affected versions not specified)

Description A bug was found in the pbkdf2 function of the m2crypto package. When given a 74 byte result, a buffer overflow occurs, leading to a crash of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0458

Produtos afetados

M2Crypto

Referências · 4

• https://osv.dev/vulnerability/MGASA-2015-0458 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0458.html · Nota de Segurança
• https://lists.fedoraproject.org/pipermail/package-announce/2015-November/172083.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17179 · Nota