Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-12422 →

DEBIAN-CVE-2018-12422

addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer O...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 evolution-data-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-1"}]}]

Debian:13 evolution-data-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-1"}]}]

Debian:14 evolution-data-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.5-1"}]}]

Références

advisory security-tracker.debian.org