CVE-2021-44847
A stack-based buffer overflow in handle_request function in DHT.c in t ...
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Ubuntu (moyenne).
Description
A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 10 | libtoxcore | pas de correctif indiqué |
| debian 11 | libtoxcore | pas de correctif indiqué |
| debian 12 | libtoxcore | 0.2.13-1 |
| debian 13 | libtoxcore | 0.2.13-1 |
| debian 14 | libtoxcore | 0.2.13-1 |
| echo | libtoxcore | 0.2.13-1 |
| ubuntu 20.04-ESM | libtoxcore | pas de correctif indiqué |
| ubuntu 22.04 | libtoxcore | 0.2.13-1 |
| ubuntu 22.10 | libtoxcore | 0.2.13-1 |
| ubuntu 23.04 | libtoxcore | 0.2.13-1 |
| ubuntu 23.10 | libtoxcore | 0.2.13-1 |
| ubuntu 24.04 | libtoxcore | 0.2.13-1 |
Afficher les 17 entrées de 17 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| debian 10 | libtoxcore | pas de correctif indiqué |
| debian 11 | libtoxcore | pas de correctif indiqué |
| debian 12 | libtoxcore | 0.2.13-1 |
| debian 13 | libtoxcore | 0.2.13-1 |
| debian 14 | libtoxcore | 0.2.13-1 |
| echo | libtoxcore | 0.2.13-1 |
| ubuntu 20.04-ESM | libtoxcore | pas de correctif indiqué |
| ubuntu 22.04 | libtoxcore | 0.2.13-1 |
| ubuntu 22.10 | libtoxcore | 0.2.13-1 |
| ubuntu 23.04 | libtoxcore | 0.2.13-1 |
| ubuntu 23.10 | libtoxcore | 0.2.13-1 |
| ubuntu 24.04 | libtoxcore | 0.2.13-1 |
| ubuntu 24.10 | libtoxcore | 0.2.13-1 |
| ubuntu 25.04 | libtoxcore | 0.2.13-1 |
| ubuntu 25.10 | libtoxcore | 0.2.13-1 |
| ubuntu 26.04 | libtoxcore | 0.2.13-1 |
| ubuntu 26.10 | libtoxcore | 0.2.13-1 |
Références
- https://blog.tox.chat/2021/12/stack-based-buffer-overflow-vulnerability-in-udp-packet-handling-in-toxcore-cve-2021-44847/
- https://github.com/TokTok/c-toxcore/pull/1718
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7EBS3NIRYJ7V3PTNINP3PJSVUHGZTGA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLTKINSPO5T65LB3ZASDPCREKUE22RYE/
- https://www.cve.org/CVERecord?id=CVE-2021-44847