Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0323-1

Опубликовано: 23 мар. 2019
Источник: suse-cvrf

Описание

Security update for libcomps

This update for libcomps fixes the following issue:

Security issue fixed:

  • CVE-2019-3817: Fixed a use-after-free vulnerability in comps_objmradix.c:comps_objmrtree_unite() function where could allow to application crash or code execution (bsc#1122841).

Список пакетов

openSUSE Leap 15.0
libcomps-devel-0.1.8-lp150.2.3.1
libcomps-doc-0.1.8-lp150.2.3.1
libcomps0_1_6-0.1.8-lp150.2.3.1
python-libcomps-doc-0.1.8-lp150.2.3.1
python2-libcomps-0.1.8-lp150.2.3.1
python3-libcomps-0.1.8-lp150.2.3.1

Ссылки

Описание

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.

Затронутые продукты
openSUSE Leap 15.0:libcomps-devel-0.1.8-lp150.2.3.1
openSUSE Leap 15.0:libcomps-doc-0.1.8-lp150.2.3.1
openSUSE Leap 15.0:libcomps0_1_6-0.1.8-lp150.2.3.1
openSUSE Leap 15.0:python-libcomps-doc-0.1.8-lp150.2.3.1
Ссылки