CVE-2017-7555
17.08.2017, 19:29
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| augeas | augeas | 𝑥 ≤ 1.8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| augeas |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| augeas-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| augeas-lenses |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libaugeas0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libfa1 |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
References