Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2591-1

Опубликовано: 03 сент. 2018
Источник: suse-cvrf

Описание

Security update for zutils

This update for zutils to version 1.7 fixes one security issue:

  • CVE-2018-1000637: buffer overrun in zcat utility (boo#1103878)

Please note that the zutils zcat utility is distinct from the default gzip zcat utility.

Список пакетов

openSUSE Leap 42.3
zutils-1.7-4.3.1

Ссылки

Описание

zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2.

Затронутые продукты
openSUSE Leap 42.3:zutils-1.7-4.3.1
Ссылки