Out-of-Bounds

Affecting libbsd package, versions <0.7.0-2+deb8u1

Overview

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

References

• CVE Details
• Debian Security Tracker
• Fedora Security Update
• Fedora Security Update
• Gentoo Security Advisory
• MLIST
• OSS security Advisory
• UBUNTU
• Ubuntu CVE Tracker
• https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html
• https://bugs.freedesktop.org/show_bug.cgi?id=93881
• https://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7