Описание
Security update for libcares2
This update for libcares2 fixes the following issues:
- Add patch to fix single byte out of buffer write (CVE-2016-5180, bsc#1007728)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP1
libcares2-1.9.1-5.1
libcares2-32bit-1.9.1-5.1
SUSE Linux Enterprise Desktop 12 SP2
libcares2-1.9.1-5.1
libcares2-32bit-1.9.1-5.1
SUSE Linux Enterprise Server 12 SP1
libcares2-1.9.1-5.1
SUSE Linux Enterprise Server 12 SP2
libcares2-1.9.1-5.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libcares2-1.9.1-5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libcares2-1.9.1-5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libcares2-1.9.1-5.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libcares-devel-1.9.1-5.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libcares-devel-1.9.1-5.1
SUSE Linux Enterprise Workstation Extension 12 SP1
libcares2-32bit-1.9.1-5.1
SUSE Linux Enterprise Workstation Extension 12 SP2
libcares2-32bit-1.9.1-5.1
Ссылки
- Link for SUSE-SU-2016:3286-1
- E-Mail link for SUSE-SU-2016:3286-1
- SUSE Security Ratings
- SUSE Bug 1007728
- SUSE CVE CVE-2016-5180 page
Описание
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libcares2-1.9.1-5.1
SUSE Linux Enterprise Desktop 12 SP1:libcares2-32bit-1.9.1-5.1
SUSE Linux Enterprise Desktop 12 SP2:libcares2-1.9.1-5.1
SUSE Linux Enterprise Desktop 12 SP2:libcares2-32bit-1.9.1-5.1
Ссылки
- CVE-2016-5180
- SUSE Bug 1007728