Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-5063 →

DEBIAN-CVE-2019-5063

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 opencv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0+dfsg-3"}]}]

Debian:13 opencv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0+dfsg-3"}]}]

Debian:14 opencv

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0+dfsg-3"}]}]

Références

advisory security-tracker.debian.org