Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-36148 →
DEBIAN-CVE-2020-36148
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments).
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
libmysofa
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]
Debian:13
libmysofa
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]
Debian:14
libmysofa
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2~dfsg0-1"}]}]
Références
- advisory security-tracker.debian.org