PT-2016-3240 · Yodl+2 · Yodl+2

Hanno Bock · Published 2016-02-04 · Updated 2024-12-23 · CVE-2016-10375

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions yodl versions prior to 3.07.01

Description The issue is caused by a buffer over-read in the queue push function, located in queue/queuepush.c. This could allow a remote attacker to compromise the confidentiality, integrity, and availability of data.

Recommendations For versions prior to 3.07.01, update to version 3.07.01 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2020-3157

ALT-PU-2020-3186

ALT-PU-2024-17304

BDU:2018-00035

CVE-2016-10375

DLA-2194-1

DLA-976-1

MGASA-2017-0192

SUSE-SU-2017:1504-1

SUSE-SU-2017_1504-1

Affected Products

Alt Linux

Suse

Yodl

References · 31

• https://github.com/fbb-git/yodl/commit/fd85f8c94182558ff1480d06a236d6fb927979a3 · Patch
• https://github.com/fbb-git/yodl/issues/1 · Patch
• https://osv.dev/vulnerability/CVE-2016-10375 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:1504-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2024-17304 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-10375 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-2194-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/yodl · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00035 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10375 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2020-3157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10375 · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0192 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2194-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-10375 · Security Note