Описание
[GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| svxlink | fixed | 26.05.1-1 | package | |
| svxlink | no-dsa | trixie | package |
Примечания
https://github.com/sm0svx/svxlink/security/advisories/GHSA-6wgq-wg3w-jgvx
Связанные уязвимости
ubuntu
16 дней назад
[GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference]
redhat
около 2 месяцев назад
A flaw was found in svxlink's svxreflector component. A dangling Json::Value reference is written to after the underlying storage is replaced upon receiving repeated MsgNodeInfo messages. This use-after-free write can lead to a crash or potentially arbitrary code execution.