PT-2018-11161 · Gnome+1 · Gnome Evolution+1
Publicado
2018-06-15
·
Atualizado
2024-08-05
·
CVE-2018-12422
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GNOME Evolution versions through 3.29.2
Description
The issue might allow attackers to trigger a Buffer Overflow via a long query that is processed by the
strcat function in the e-book-backend-ldap.c file. However, the software maintainer disputes this, stating that the code had computed the required string length first and then allocated a large-enough buffer on the heap.Recommendations
For versions through 3.29.2, consider this issue disputed and no specific fix is provided, however, as a precautionary measure, restrict access to the
e-book-backend-ldap.c file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnome Evolution