PT-2015-7934 · Unknown · Exfat-Utils

Published 2015-11-02 · Updated 2015-11-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions exfat-utils (affected versions not specified)

Description The issue concerns a collection of tools for working with the exFAT filesystem. Fuzzing with american fuzzy lop revealed a write heap overflow and an endless loop in exfatfsck. Systems that automatically run filesystem checks on external devices are especially at risk. A malformed input can cause a write heap overflow in the verify vbr checksum function, potentially allowing code execution. Another malformed input can cause an endless loop, leading to a possible denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0422

Affected Products

Exfat-Utils

References · 4

• https://osv.dev/vulnerability/MGASA-2015-0422 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0422.html · Security Note
• http://openwall.com/lists/oss-security/2015/10/24/1 · Note
• https://bugs.mageia.org/show_bug.cgi?id=17013 · Note