Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-40403 →
DEBIAN-CVE-2021-40403
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerb...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
gerbv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-1"}]}]
Debian:13
gerbv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-1"}]}]
Références
- advisory security-tracker.debian.org