Shell Archive Utilities - Patches: patch #10090, Patch for CVE-2018-1000097
You are not allowed to post comments on this tracker with your current authentication level.
patch #10090: Patch for CVE-2018-1000097
Submitter: | Christian Vögl <loreson> | ||
Submitted: | Mon 02 Aug 2021 11:48:02 AM UTC | ||
Category: | None | Priority: | 5 - Normal |
Status: | None | Privacy: | Public |
Assigned to: | None | Open/Closed: | Open |
Attached Files
file #51727: sharutils-CVE-2018-1000097-fix_buffer_overflow.patch added by loreson (934B - text/x-patch)
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follows 1 latest change.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2021-08-02 | loreson | Attached File | - | Added sharutils-CVE-2018-1000097-fix_buffer_overflow.patch, #51727 |
Powered by Savane 3.13-02a9.
Corresponding source code
A patch for CVE-2018-1000097 we have at SUSE.
The main problem is this loop:
while (isspace ((int) *buf)) buf++;
which does not check the buffer size.