CVE-2021-44847
A stack-based buffer overflow in handle_request function in DHT.c in t ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | libtoxcore | düzeltme belirtilmemiş |
| debian 11 | libtoxcore | düzeltme belirtilmemiş |
| debian 12 | libtoxcore | 0.2.13-1 |
| debian 13 | libtoxcore | 0.2.13-1 |
| debian 14 | libtoxcore | 0.2.13-1 |
| echo | libtoxcore | 0.2.13-1 |
| ubuntu 20.04-ESM | libtoxcore | düzeltme belirtilmemiş |
| ubuntu 22.04 | libtoxcore | 0.2.13-1 |
| ubuntu 22.10 | libtoxcore | 0.2.13-1 |
| ubuntu 23.04 | libtoxcore | 0.2.13-1 |
| ubuntu 23.10 | libtoxcore | 0.2.13-1 |
| ubuntu 24.04 | libtoxcore | 0.2.13-1 |
17 kaynaktaki 17 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | libtoxcore | düzeltme belirtilmemiş |
| debian 11 | libtoxcore | düzeltme belirtilmemiş |
| debian 12 | libtoxcore | 0.2.13-1 |
| debian 13 | libtoxcore | 0.2.13-1 |
| debian 14 | libtoxcore | 0.2.13-1 |
| echo | libtoxcore | 0.2.13-1 |
| ubuntu 20.04-ESM | libtoxcore | düzeltme belirtilmemiş |
| ubuntu 22.04 | libtoxcore | 0.2.13-1 |
| ubuntu 22.10 | libtoxcore | 0.2.13-1 |
| ubuntu 23.04 | libtoxcore | 0.2.13-1 |
| ubuntu 23.10 | libtoxcore | 0.2.13-1 |
| ubuntu 24.04 | libtoxcore | 0.2.13-1 |
| ubuntu 24.10 | libtoxcore | 0.2.13-1 |
| ubuntu 25.04 | libtoxcore | 0.2.13-1 |
| ubuntu 25.10 | libtoxcore | 0.2.13-1 |
| ubuntu 26.04 | libtoxcore | 0.2.13-1 |
| ubuntu 26.10 | libtoxcore | 0.2.13-1 |
Referanslar
- https://blog.tox.chat/2021/12/stack-based-buffer-overflow-vulnerability-in-udp-packet-handling-in-toxcore-cve-2021-44847/
- https://github.com/TokTok/c-toxcore/pull/1718
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7EBS3NIRYJ7V3PTNINP3PJSVUHGZTGA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLTKINSPO5T65LB3ZASDPCREKUE22RYE/
- https://www.cve.org/CVERecord?id=CVE-2021-44847