Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:0467-1

Опубликовано: 15 фев. 2017
Источник: suse-cvrf

Описание

Security update for libXpm

This update for libXpm fixes the following issues:

  • A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. (bsc#1021315)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Desktop 12 SP2
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Server 12 SP1
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Server 12 SP2
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libXpm4-3.5.11-5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libXpm4-3.5.11-5.1
libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libXpm-devel-3.5.11-5.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libXpm-devel-3.5.11-5.1
libXpm-tools-3.5.11-5.1

Ссылки

Описание

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libXpm4-3.5.11-5.1
SUSE Linux Enterprise Desktop 12 SP1:libXpm4-32bit-3.5.11-5.1
SUSE Linux Enterprise Desktop 12 SP2:libXpm4-3.5.11-5.1
SUSE Linux Enterprise Desktop 12 SP2:libXpm4-32bit-3.5.11-5.1
Ссылки