Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-1000052 →
DEBIAN-CVE-2018-1000052
fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnera...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format specifier in the fmt::print() function results in a SIGSEGV (memory corruption, invalid write). This vulnerability appears to have been fixed in after commit 8cf30aa2be256eba07bb1cefb998c52326e846e7.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
fmtlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1+ds-1"}]}]
Debian:13
fmtlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1+ds-1"}]}]
Debian:14
fmtlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1+ds-1"}]}]
Références
- advisory security-tracker.debian.org