Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-18218 →
DEBIAN-CVE-2019-18218
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
file
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]
Debian:13
file
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]
Debian:14
file
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]
Références
- advisory security-tracker.debian.org