This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-10722 →

DEBIAN-CVE-2016-10722

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock,...

Original description

The description as published by the source.

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

Debian:13 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

Debian:14 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

References

advisory security-tracker.debian.org