Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-68767 →

DEBIAN-CVE-2026-68767

hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer l...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 hashcat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 hashcat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 hashcat

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org