PT-2017-9847 · None+3 · Musl Libc+4
Rich Felker
·
Publicado
2016-11-21
·
Atualizado
2024-10-17
·
CVE-2016-8859
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
TRE library versions (affected versions not specified)
musl libc versions (affected versions not specified)
Description
The issue is related to multiple integer overflows in the TRE library and musl libc, which can be exploited by attackers to cause memory corruption. This can be achieved by providing a large number of states or tags, resulting in an out-of-bounds write.
Recommendations
For TRE library versions, consider applying configuration changes to limit the number of states or tags that can be processed to prevent memory corruption.
For musl libc versions, restrict access to the library to minimize the risk of exploitation until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Tre Library
Ubuntu
Musl Libc