First Last Prev Next    This bug is not in your last search results.
Bug 1153167 - (CVE-2019-17264) VUL-1: CVE-2019-17264: libfwsi: heap-based buffer over-read in liblnk_location_information_read_data in liblnk_location_information.c
(CVE-2019-17264)
VUL-1: CVE-2019-17264: libfwsi: heap-based buffer over-read in liblnk_locatio...
Status: NEW
Classification: openSUSE
Product: openSUSE Distribution
Classification: openSUSE
Component: Basesystem
Leap 15.1
Other Other
: P4 - Low : Minor (vote)
: ---
Assigned To: Greg Freemyer
Security Team bot
https://smash.suse.de/issue/244246/
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2019-10-07 06:59 UTC by Alexander Bergmann
Modified: 2019-10-07 22:13 UTC (History)
0 users

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Bergmann 2019-10-07 06:59:06 UTC 
CVE-2019-17264

In libyal liblnk before 20191006, liblnk_location_information_read_data in
liblnk_location_information.c has a heap-based buffer over-read because an
incorrect variable name is used for a certain offset.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-17264
http://www.cvedetails.com/cve/CVE-2019-17264/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17264
https://github.com/libyal/liblnk/issues/38
https://github.com/libyal/liblnk/compare/20181227...20191006
First Last Prev Next    This bug is not in your last search results.