CVE-2023-49287
TinyDir is a lightweight C directory and file reader. Buffer overflows ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD.
Beschreibung
TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| conan::GitLab Advisory Database Community | tinydir | 1.2.6 |
| debian 12 | falcosecurity-libs, gemmi | kein Fix angegeben |
| debian 13 | falcosecurity-libs, gemmi | 0.14.1-1 und 1 weitere |
| debian 14 | falcosecurity-libs, gemmi | 0.14.1-1 und 1 weitere |
| echo | falcosecurity-libs, gemmi | 0.14.1-1 und 1 weitere |
| rapidfort debian 12 | falcosecurity-libs, gemmi | 0:0.14.1-1 und 1 weitere |
| rapidfort debian 13 | falcosecurity-libs, gemmi | 0:0.14.1-1 und 1 weitere |
| rapidfort fedora 43 | tinydir, tinydir-devel | 1.2.5-11.fc43 |
Alle 15 Einträge aus 8 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| conan::GitLab Advisory Database Community | tinydir | 1.2.6 |
| debian 12 | falcosecurity-libs | kein Fix angegeben |
| debian 12 | gemmi | kein Fix angegeben |
| debian 13 | falcosecurity-libs | 0.14.1-1 |
| debian 13 | gemmi | 0.6.4+ds-1 |
| debian 14 | falcosecurity-libs | 0.14.1-1 |
| debian 14 | gemmi | 0.6.4+ds-1 |
| echo | falcosecurity-libs | 0.14.1-1 |
| echo | gemmi | 0.6.4+ds-1 |
| rapidfort debian 12 | falcosecurity-libs | 0:0.14.1-1 |
| rapidfort debian 12 | gemmi | 0:0.6.4+ds-1 |
| rapidfort debian 13 | falcosecurity-libs | 0:0.14.1-1 |
| rapidfort debian 13 | gemmi | 0:0.6.4+ds-1 |
| rapidfort fedora 43 | tinydir | 1.2.5-11.fc43 |
| rapidfort fedora 43 | tinydir-devel | 1.2.5-11.fc43 |
Referenzen
- http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2023/Dec/14
- http://www.openwall.com/lists/oss-security/2023/12/04/1
- https://github.com/cxong/tinydir/releases/tag/1.2.6
- https://github.com/cxong/tinydir/security/advisories/GHSA-jf5r-wgf4-qhxf
- https://nvd.nist.gov/vuln/detail/CVE-2023-49287