Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.
References
| Link | Resource |
|---|---|
| http://www.debian.org/security/2016/dsa-3551 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/02/06/7 | Mailing List |
| http://www.openwall.com/lists/oss-security/2015/02/23/9 | Mailing List |
| https://bugzilla.redhat.com/show_bug.cgi?id=861358 | Exploit Issue Tracking Patch Technical Description |
| https://bugzilla.redhat.com/show_bug.cgi?id=863102 | Issue Tracking |
| http://www.debian.org/security/2016/dsa-3551 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/02/06/7 | Mailing List |
| http://www.openwall.com/lists/oss-security/2015/02/23/9 | Mailing List |
| https://bugzilla.redhat.com/show_bug.cgi?id=861358 | Exploit Issue Tracking Patch Technical Description |
| https://bugzilla.redhat.com/show_bug.cgi?id=863102 | Issue Tracking |
Configurations
History
21 Nov 2024, 02:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.debian.org/security/2016/dsa-3551 - Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2015/02/06/7 - Mailing List | |
| References | () http://www.openwall.com/lists/oss-security/2015/02/23/9 - Mailing List | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=861358 - Exploit, Issue Tracking, Patch, Technical Description | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=863102 - Issue Tracking |
Information
Published : 2016-03-30 10:59
Updated : 2024-11-21 02:39
NVD link : CVE-2015-8836
Mitre link : CVE-2015-8836
CVE.ORG link : CVE-2015-8836
JSON object : View
Products Affected
fuseiso_project
- fuseiso
fedoraproject
- fedora
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer