PT-2017-6354 · Gnu+2 · Gnu Mpfr+2

Publicado 2015-01-09 · Atualizado 2024-06-15 · CVE-2014-9474

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU MPFR versions prior to 3.1.2-p11

Description A buffer overflow issue exists in the mpfr strtofr function due to incorrect documentation for mpn set str, allowing context-dependent attackers to have an unspecified impact.

Recommendations For GNU MPFR versions prior to 3.1.2-p11, update to version 3.1.2-p11 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2136

CVE-2014-9474

MGASA-2015-0021

OPENSUSE-SU-2024:10472-1

RHSA-2025:9332

SUSE-SU-2015_0208-1

SUSE-SU-2015_0219-1

Produtos afetados

Alt Linux

Gnu Mpfr

Suse

Referências · 33

• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9474 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2015-2136 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2015-0021 · Aviso do Fabricante
• http://download.suse.com/patch/finder/?keywords=b3636c02e7dfd8e676a5d86b23f1daff · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1171701 · Nota
• http://support.novell.com/security/cve/CVE-2014-9474.html · Nota
• http://mpfr.org/mpfr-3.1.2/patch11 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/01/03/12 · Nota
• https://linux.oracle.com/errata/ELSA-2025-9332.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html · Aviso do Fabricante
• http://securityfocus.com/bid/71542 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2014-9474 · Nota
• https://gforge.inria.fr/scm/viewvc.php/mpfr?revision=9243&view=revision · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2015-February/001208.html · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html · Aviso do Fabricante