Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:0508-1

Опубликовано: 05 мар. 2015
Источник: suse-cvrf

Описание

Security update for libmspack

This update fixes the following security issue:

* CVE-2014-9556: An integer overflow in the function qtmd_decompress() could have been exploited causing a denial of service (endless loop) (bnc##912214)

Security Issues:

* CVE-2014-9556 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9556>

Список пакетов

SUSE Linux Enterprise Desktop 11 SP3
libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server 11 SP3
libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATA
libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3
libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Software Development Kit 11 SP3
libmspack-devel-0.0.20060920alpha-74.5.1

Ссылки

Описание

Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to cause a denial of service (hang) via a crafted CAB file, which triggers an infinite loop.

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP3:libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server 11 SP3-TERADATA:libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server 11 SP3:libmspack0-0.0.20060920alpha-74.5.1
SUSE Linux Enterprise Server for SAP Applications 11 SP3:libmspack0-0.0.20060920alpha-74.5.1
Ссылки