New subject: [Bug 1116887] VUL-1: CVE-2018-19387: tmux: format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers to cause a denial of service

21 Nov 2018

      http://bugzilla.opensuse.org/show_bug.cgi?id=1116887

            Bug ID: 1116887
           Summary: VUL-1: CVE-2018-19387: tmux: format_cb_pane_tabs in
                    format.c in tmux 2.7 through 2.8 might allow attackers
                    to cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
               URL: https://smash.suse.de/issue/219484/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: nemysis@openSUSE.org
          Reporter: kbabioch@suse.com
        QA Contact: security-team@suse.de
                CC: mimi.vx@gmail.com
          Found By: Security Response Team
           Blocker: ---

CVE-2018-19387

format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers
to
cause a denial of service (NULL Pointer Dereference and application crash) by
arranging for a malloc failure.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19387
http://www.cvedetails.com/cve/CVE-2018-19387/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19387
https://github.com/tmux/tmux/issues/1547
https://github.com/openbsd/src/commit/b32e1d34e10a0da806823f57f02a4ae6e93d75...

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1116887] New: VUL-1: CVE-2018-19387: tmux: format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers to cause a denial of service

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠suse.com

tags

participants (2)