oss-sec mailing list archives

CVE request: heap overflow in tcptrack < 1.4.2

From: Vincent Danen <vdanen () redhat com>
Date: Mon, 8 Aug 2011 11:24:36 -0600

A heap overflow in the parsing of tcptrack's command line was found.
The details are pretty sparse, but here are some references:

http://www.rhythm.cx/~steve/devel/tcptrack/#news
https://bugs.gentoo.org/show_bug.cgi?id=377917
https://bugzilla.redhat.com/show_bug.cgi?id=729096

Could a CVE be assigned to this please?  Thanks.

--

Vincent Danen / Red Hat Security Response Team

Current thread:

CVE request: heap overflow in tcptrack < 1.4.2 Vincent Danen (Aug 09)
- Re: CVE request: heap overflow in tcptrack < 1.4.2 Josh Bressers (Aug 09)
  - Re: CVE request: heap overflow in tcptrack < 1.4.2 Steven M. Christey (Aug 31)
    - Re: CVE request: heap overflow in tcptrack < 1.4.2 Moritz Muehlenhoff (Sep 13)