Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-29394 →
DEBIAN-CVE-2020-29394
A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary co...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
dlt-daemon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-0.3"}]}]
Debian:13
dlt-daemon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-0.3"}]}]
Debian:14
dlt-daemon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.5-0.3"}]}]
Références
- advisory security-tracker.debian.org