Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:0557-1

Опубликовано: 23 фев. 2017
Источник: suse-cvrf

Описание

Security update for libXpm

This update for libXpm fixes the following issues:

  • A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. (bsc#1021315)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.1
libXpm-3.5.11-8.1
libXpm-devel-3.5.11-8.1
libXpm-devel-32bit-3.5.11-8.1
libXpm-tools-3.5.11-8.1
libXpm4-3.5.11-8.1
libXpm4-32bit-3.5.11-8.1
openSUSE Leap 42.2
libXpm-3.5.11-8.1
libXpm-devel-3.5.11-8.1
libXpm-devel-32bit-3.5.11-8.1
libXpm-tools-3.5.11-8.1
libXpm4-3.5.11-8.1
libXpm4-32bit-3.5.11-8.1

Ссылки

Описание

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via (1) the number of extensions or (2) their concatenated length in a crafted XPM file, which triggers a heap-based buffer overflow.

Затронутые продукты
openSUSE Leap 42.1:libXpm-3.5.11-8.1
openSUSE Leap 42.1:libXpm-devel-3.5.11-8.1
openSUSE Leap 42.1:libXpm-devel-32bit-3.5.11-8.1
openSUSE Leap 42.1:libXpm-tools-3.5.11-8.1
Ссылки