PT-2017-3339 · Augeas+5 · Augeas+5
Publicado
2017-08-17
·
Atualizado
2018-03-09
·
CVE-2017-7555
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Augeas versions up to and including 1.8.0
Description
The issue is caused by a heap-based buffer overflow due to improper handling of escaped strings. An attacker could send crafted strings that would cause the application using Augeas to copy past the end of a buffer, leading to a crash or possible code execution. This can be exploited by a remote attacker to execute arbitrary code or cause a denial of service by sending specially crafted strings.
Recommendations
For Augeas versions up to and including 1.8.0, update to a version later than 1.8.0 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Correção
Buffer Overflow
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Augeas
Centos
Red Hat
Suse
Ubuntu