PT-2017-8016 · Gnu+1 · Libiberty+1

Marcel Böhme

·

Publicado

2017-02-24

·

Atualizado

2021-07-21

·

CVE-2016-2226

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libiberty (affected versions not specified)
Description The issue is related to an integer overflow in the string appends function in cplus-dem.c within libiberty. This allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow. The estimated number of potentially affected devices worldwide is not available. There is no information provided about real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190CWE-119

Identificadores relacionados

CVE-2016-2226
DLA-552-1
MGASA-2017-0222
MGASA-2018-0034
MGASA-2018-0046
USN-3337-1
USN-3367-1
USN-3368-1
USN-4336-2

Produtos afetados

Ubuntu
Libiberty