New subject: [Bug 1052478] VUL-0: CVE-2017-12482: ledger: ledger::parse_date_mask_routine function in times.cc allows remote attackers to cause a denial of service

7 Aug 2017

      http://bugzilla.opensuse.org/show_bug.cgi?id=1052478

            Bug ID: 1052478
           Summary: VUL-0: CVE-2017-12482: ledger:
                    ledger::parse_date_mask_routine function in times.cc
                    allows remote attackers to cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.2
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: crrodriguez@opensuse.org
          Reporter: abergmann@suse.com
        QA Contact: qa-bugs@suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-12482

The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows
remote attackers to cause a denial of service (stack-based buffer overflow and
application crash) or possibly have unspecified other impact via a crafted
file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-12482
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-12482.html
http://www.cvedetails.com/cve/CVE-2017-12482/
http://bugs.ledger-cli.org/show_bug.cgi?id=1224

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1052478] New: VUL-0: CVE-2017-12482: ledger: ledger::parse_date_mask_routine function in times.cc allows remote attackers to cause a denial of service

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

tags

participants (1)