Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1608-1

Опубликовано: 11 июн. 2020
Источник: suse-cvrf

Описание

Security update for ed

This update for ed fixes the following security issue:

  • CVE-2017-5357: An invalid free in the regular expression handling of the 'ed' command processing could allow local users to crash ed. (bsc#1019807)

Список пакетов

Image SLES12-SP5-Azure-SAP-BYOS
ed-1.9-4.4.5
Image SLES12-SP5-Azure-SAP-On-Demand
ed-1.9-4.4.5
Image SLES12-SP5-EC2-SAP-BYOS
ed-1.9-4.4.5
Image SLES12-SP5-EC2-SAP-On-Demand
ed-1.9-4.4.5
Image SLES12-SP5-GCE-SAP-BYOS
ed-1.9-4.4.5
Image SLES12-SP5-GCE-SAP-On-Demand
ed-1.9-4.4.5
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
ed-1.9-4.4.5
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
ed-1.9-4.4.5
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
ed-1.9-4.4.5
SUSE Linux Enterprise Server 12 SP4
ed-1.9-4.4.5
SUSE Linux Enterprise Server 12 SP5
ed-1.9-4.4.5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
ed-1.9-4.4.5
SUSE Linux Enterprise Server for SAP Applications 12 SP5
ed-1.9-4.4.5

Ссылки

Описание

regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.

Затронутые продукты
Image SLES12-SP5-Azure-SAP-BYOS:ed-1.9-4.4.5
Image SLES12-SP5-Azure-SAP-On-Demand:ed-1.9-4.4.5
Image SLES12-SP5-EC2-SAP-BYOS:ed-1.9-4.4.5
Image SLES12-SP5-EC2-SAP-On-Demand:ed-1.9-4.4.5
Ссылки