CVE-2016-2851
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (media).
Descripción
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | libotr | 4.1.1-1 |
| debian 12 | libotr | 4.1.1-1 |
| debian 13 | libotr | 4.1.1-1 |
| debian 14 | libotr | 4.1.1-1 |
| debian 7 | libotr | 3.2.1-1+deb7u2 |
| debian 8 | libotr | 4.1.0-2+deb8u1 |
| echo | libotr | 4.1.1-1 |
| ubuntu 12.04 | libotr | 3.2.0-4ubuntu0.3 |
| ubuntu 14.04 | libotr | 4.0.0-2.2ubuntu1.1 |
| ubuntu 15.10 | libotr | 4.1.0-2ubuntu0.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00030.html
- http://seclists.org/fulldisclosure/2016/Mar/21
- http://www.debian.org/security/2016/dsa-3512
- http://www.securityfocus.com/archive/1/537745/100/0/threaded
- http://www.securityfocus.com/bid/84285
- http://www.ubuntu.com/usn/USN-2926-1
- https://lists.cypherpunks.ca/pipermail/otr-users/2016-March/002581.html