[Bug 1189727] VUL-1: CVE-2020-18900: libexe: A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128 allows attackers to execute arbitrary code.

17 Sep 2021

      https://bugzilla.suse.com/show_bug.cgi?id=1189727
https://bugzilla.suse.com/show_bug.cgi?id=1189727#c2

Gianluca Gabrielli  changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #2 from Gianluca Gabrielli  ---
As result of an interesting discussion with the main developer [0], MITRE
disputed this bug [1]. No other action are required, closing.

[0] https://github.com/libyal/libexe/issues/1
[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18900

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠suse.com

tags

participants (1)