Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-14938 →
DEBIAN-CVE-2018-14938
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during capl...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the function handle_prism during caplen processing. If the caplen is less than 144, one can cause an integer overflow in the function handle_80211, which will result in an out-of-bounds read and may allow access to sensitive memory (or a denial of service).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
Debian:13
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
Debian:14
tcpflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0+repack1-1"}]}]
Références
- advisory security-tracker.debian.org