Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2016/09/23/5 | Mailing List Patch Third Party Advisory |
http://www.openwall.com/lists/oss-security/2016/09/23/9 | Mailing List Patch Third Party Advisory |
http://www.securityfocus.com/bid/93164 | Third Party Advisory VDB Entry |
https://github.com/weidai11/cryptopp/issues/302 | Issue Tracking Patch Third Party Advisory |
https://www.cryptopp.com/release565.html | Release Notes Vendor Advisory |
http://www.openwall.com/lists/oss-security/2016/09/23/5 | Mailing List Patch Third Party Advisory |
http://www.openwall.com/lists/oss-security/2016/09/23/9 | Mailing List Patch Third Party Advisory |
http://www.securityfocus.com/bid/93164 | Third Party Advisory VDB Entry |
https://github.com/weidai11/cryptopp/issues/302 | Issue Tracking Patch Third Party Advisory |
https://www.cryptopp.com/release565.html | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 02:58
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.openwall.com/lists/oss-security/2016/09/23/5 - Mailing List, Patch, Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2016/09/23/9 - Mailing List, Patch, Third Party Advisory | |
References | () http://www.securityfocus.com/bid/93164 - Third Party Advisory, VDB Entry | |
References | () https://github.com/weidai11/cryptopp/issues/302 - Issue Tracking, Patch, Third Party Advisory | |
References | () https://www.cryptopp.com/release565.html - Release Notes, Vendor Advisory |
Information
Published : 2017-01-30 21:59
Updated : 2024-11-21 02:58
NVD link : CVE-2016-7544
Mitre link : CVE-2016-7544
CVE.ORG link : CVE-2016-7544
JSON object : View
Products Affected
cryptopp
- crypto\+\+
microsoft
- windows
CWE
CWE-399
Resource Management Errors