Описание
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libgig | fixed | 4.0.0-4 | package | |
| libgig | no-dsa | stretch | package | |
| libgig | no-dsa | jessie | package | |
| libgig | no-dsa | wheezy | package |
Примечания
http://seclists.org/fulldisclosure/2017/Aug/39 (provides repoducer files)
http://svn.linuxsampler.org/cgi-bin/viewvc.cgi?view=revision&revision=3348
EPSS
Связанные уязвимости
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
EPSS