Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:3287-1

Опубликовано: 29 дек. 2016
Источник: suse-cvrf

Описание

Security update for libcares2

This update for libcares2 fixes the following issues:

  • Add patch to fix single byte out of buffer write (CVE-2016-5180, bsc#1007728)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libcares2-1.7.4-7.9.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libcares2-1.7.4-7.9.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libcares-devel-1.7.4-7.9.1

Ссылки

Описание

Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libcares2-1.7.4-7.9.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libcares2-1.7.4-7.9.1
SUSE Linux Enterprise Software Development Kit 11 SP4:libcares-devel-1.7.4-7.9.1
Ссылки