PT-2016-3240 · Yodl+2 · Yodl+2

Hanno Bock · Publicado 2016-02-04 · Atualizado 2024-12-23 · CVE-2016-10375

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions yodl versions prior to 3.07.01

Description The issue is caused by a buffer over-read in the queue push function, located in queue/queuepush.c. This could allow a remote attacker to compromise the confidentiality, integrity, and availability of data.

Recommendations For versions prior to 3.07.01, update to version 3.07.01 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2020-3157

ALT-PU-2020-3186

ALT-PU-2024-17304

BDU:2018-00035

CVE-2016-10375

DLA-2194-1

DLA-976-1

MGASA-2017-0192

SUSE-SU-2017:1504-1

SUSE-SU-2017_1504-1

Produtos afetados

Alt Linux

Suse

Yodl

Referências · 31

• https://github.com/fbb-git/yodl/commit/fd85f8c94182558ff1480d06a236d6fb927979a3 · Correção
• https://github.com/fbb-git/yodl/issues/1 · Correção
• https://osv.dev/vulnerability/CVE-2016-10375 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2017:1504-1 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2024-17304 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-10375 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DLA-2194-1 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2020/04/msg00026.html · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2017-June/002938.html · Nota
• https://security-tracker.debian.org/tracker/source-package/yodl · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-00035 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2016-10375 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10375 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2020-3157 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10375 · Nota de Segurança