CVE-2016-7544

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
References
Link Resource
http://www.openwall.com/lists/oss-security/2016/09/23/5 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/93164 Third Party Advisory VDB Entry
https://github.com/weidai11/cryptopp/issues/302 Issue Tracking Patch Third Party Advisory
https://www.cryptopp.com/release565.html Release Notes Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/5 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/93164 Third Party Advisory VDB Entry
https://github.com/weidai11/cryptopp/issues/302 Issue Tracking Patch Third Party Advisory
https://www.cryptopp.com/release565.html Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:cryptopp:crypto\+\+:5.6.4:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:58

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2016/09/23/5 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/09/23/5 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2016/09/23/9 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/09/23/9 - Mailing List, Patch, Third Party Advisory
References () http://www.securityfocus.com/bid/93164 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/93164 - Third Party Advisory, VDB Entry
References () https://github.com/weidai11/cryptopp/issues/302 - Issue Tracking, Patch, Third Party Advisory () https://github.com/weidai11/cryptopp/issues/302 - Issue Tracking, Patch, Third Party Advisory
References () https://www.cryptopp.com/release565.html - Release Notes, Vendor Advisory () https://www.cryptopp.com/release565.html - Release Notes, Vendor Advisory

Information

Published : 2017-01-30 21:59

Updated : 2024-11-21 02:58


NVD link : CVE-2016-7544

Mitre link : CVE-2016-7544

CVE.ORG link : CVE-2016-7544


JSON object : View

Products Affected

cryptopp

  • crypto\+\+

microsoft

  • windows
CWE
CWE-399

Resource Management Errors