Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:0470-1

Опубликовано: 15 фев. 2017
Источник: suse-cvrf

Описание

Security update for xorg-x11-libXpm

This update for xorg-x11-libXpm fixes the following security issue:

  • A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. (bsc#1021315)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
xorg-x11-libXpm-7.4-3.1
xorg-x11-libXpm-32bit-7.4-3.1
xorg-x11-libXpm-x86-7.4-3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
xorg-x11-libXpm-7.4-3.1
xorg-x11-libXpm-32bit-7.4-3.1
xorg-x11-libXpm-x86-7.4-3.1
SUSE Linux Enterprise Software Development Kit 11 SP4
xorg-x11-libXpm-devel-7.4-3.1
xorg-x11-libXpm-devel-32bit-7.4-3.1

Ссылки

Описание

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:xorg-x11-libXpm-32bit-7.4-3.1
SUSE Linux Enterprise Server 11 SP4:xorg-x11-libXpm-7.4-3.1
SUSE Linux Enterprise Server 11 SP4:xorg-x11-libXpm-x86-7.4-3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:xorg-x11-libXpm-32bit-7.4-3.1
Ссылки