Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2016-10722 →

DEBIAN-CVE-2016-10722

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock,...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

Debian:13 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

Debian:14 partclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.88-1"}]}]

Références

advisory security-tracker.debian.org