Unrated
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling ext...
CVE-2020-14315
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-14315 bsdiff Fixed in: 4.3-22
- Ubuntu UBUNTU-CVE-2020-14315 bsdiff
Original description The description as published by the source.
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.
References
- advisory openwall.com
- report bugzilla.redhat.com
- report x41-dsec.de