PT-2019-13730 · Schism Development Team+1 · Schism Tracker+1

Jangler · Publicado 2019-08-02 · Atualizado 2024-06-15 · CVE-2019-14523

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Schism Tracker versions prior to 20190723

Description An issue was discovered in the Amiga Oktalyzer parser, specifically in the fmt okt load song function in fmt/okt.c, where an integer underflow can occur via a large plen.

Recommendations For versions prior to 20190723, update to a version newer than 20190722 to resolve the issue.

Exploit

Correção

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

CVE-2019-14523

OPENSUSE-SU-2019:1994-1

OPENSUSE-SU-2019:2019-1

OPENSUSE-SU-2019_1994-1

OPENSUSE-SU-2024:11373-1

Produtos afetados

Schism Tracker

Suse

Referências · 21

• 🔥 https://github.com/schismtracker/schismtracker/issues/202 · Exploit
• https://github.com/schismtracker/schismtracker/releases/tag/20190805 · Nota
• https://bugzilla.suse.com/1144261 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11373-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-14523 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/TVUUVDRVAZZ6AQWOXBN2RPUY6ZMNDO4I/#TVUUVDRVAZZ6AQWOXBN2RPUY6ZMNDO4I · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-14523 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14523 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-14523 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-14523 · Aviso do Fabricante
• https://security.gentoo.org/glsa/202107-12 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2019:1994-1 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html · Aviso do Fabricante
• https://bugzilla.suse.com/1144266 · Nota
• https://suse.com/security/cve/CVE-2019-14524 · Nota