Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:2208-1

Опубликовано: 17 авг. 2017
Источник: suse-cvrf

Описание

Security update for libplist

This update for libplist fixes the following issues:

Security issues fixed:

  • CVE-2017-6439: Heap-based buffer overflow in the parse_string_node function. (bsc#1029638)
  • CVE-2017-6438: Heap-based buffer overflow in the parse_unicode_node function. (bsc#1029706)
  • CVE-2017-6437: The base64encode function in base64.c allows local users to cause denial of service (out-of-bounds read) via a crafted plist file. (bsc#1029707)
  • CVE-2017-6436: Integer overflow in parse_string_node. (bsc#1029751)
  • CVE-2017-6435: Crafted plist file could lead to Heap-buffer overflow. (bsc#1029639)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Список пакетов

openSUSE Leap 42.2
libplist-1.12-11.1
libplist++-devel-1.12-11.1
libplist++3-1.12-11.1
libplist++3-32bit-1.12-11.1
libplist-devel-1.12-11.1
libplist3-1.12-11.1
libplist3-32bit-1.12-11.1
plistutil-1.12-11.1
python-plist-1.12-11.1
openSUSE Leap 42.3
libplist-1.12-11.1
libplist++-devel-1.12-11.1
libplist++3-1.12-11.1
libplist++3-32bit-1.12-11.1
libplist-devel-1.12-11.1
libplist3-1.12-11.1
libplist3-32bit-1.12-11.1
plistutil-1.12-11.1
python-plist-1.12-11.1

Ссылки

Описание

The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.

Затронутые продукты
openSUSE Leap 42.2:libplist++-devel-1.12-11.1
openSUSE Leap 42.2:libplist++3-1.12-11.1
openSUSE Leap 42.2:libplist++3-32bit-1.12-11.1
openSUSE Leap 42.2:libplist-1.12-11.1
Ссылки

Описание

The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

Затронутые продукты
openSUSE Leap 42.2:libplist++-devel-1.12-11.1
openSUSE Leap 42.2:libplist++3-1.12-11.1
openSUSE Leap 42.2:libplist++3-32bit-1.12-11.1
openSUSE Leap 42.2:libplist-1.12-11.1
Ссылки

Описание

The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.

Затронутые продукты
openSUSE Leap 42.2:libplist++-devel-1.12-11.1
openSUSE Leap 42.2:libplist++3-1.12-11.1
openSUSE Leap 42.2:libplist++3-32bit-1.12-11.1
openSUSE Leap 42.2:libplist-1.12-11.1
Ссылки

Описание

Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.

Затронутые продукты
openSUSE Leap 42.2:libplist++-devel-1.12-11.1
openSUSE Leap 42.2:libplist++3-1.12-11.1
openSUSE Leap 42.2:libplist++3-32bit-1.12-11.1
openSUSE Leap 42.2:libplist-1.12-11.1
Ссылки

Описание

Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

Затронутые продукты
openSUSE Leap 42.2:libplist++-devel-1.12-11.1
openSUSE Leap 42.2:libplist++3-1.12-11.1
openSUSE Leap 42.2:libplist++3-32bit-1.12-11.1
openSUSE Leap 42.2:libplist-1.12-11.1
Ссылки