Описание
A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| openbabel | fixed | 3.2.0+dfsg-1~exp | experimental | package |
| openbabel | unfixed | package | ||
| openbabel | no-dsa | trixie | package | |
| openbabel | no-dsa | bookworm | package | |
| openbabel | postponed | bullseye | package |
Примечания
https://github.com/openbabel/openbabel/issues/2834
Связанные уязвимости
A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.
A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Уязвимость функции GAMESSOutputFormat::ReadMolecule программного обеспечения преобразования форматов файлов химических веществ Open Babel, позволяющая нарушителю вызвать отказ в обслуживании
