oss-sec mailing list archives
Re: Heap-based buffer overflow in zutils zcat
From: Ben Hutchings <ben () decadent org uk>
Date: Wed, 22 Aug 2018 20:11:00 +0100
On Sun, 2018-08-05 at 21:36 +0800, Ben Hutchings wrote:
A heap-based buffer overflow (CWE-122) was discovered in the zutils implementation of zcat. It is apparently possible only if the -v option, or one of the other options that implies -v, is used. This seems to have been first discovered in 2016 as a result of interaction between initramfs-tools and zutils, but was initially thought to be a bug in the gzip implementation of zcat: https://bugs.launchpad.net/ubuntu/+source/intel-microcode/+bug/1507443 https://bugs.debian.org/815915 It was eventually reported to the zutils upstream developer (Antonio Diaz Diaz, cc'd) in the last few weeks and was fixed in version 1.8-pre2. This was announced in: https://lists.nongnu.org/archive/html/zutils-bug/2018-08/msg00000.html I will request a CVE ID for this.
This has been designated as CVE-2018-1000637. Ben. -- Ben Hutchings You can't have everything. Where would you put it?
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- Heap-based buffer overflow in zutils zcat Ben Hutchings (Aug 05)
- Re: Heap-based buffer overflow in zutils zcat Ben Hutchings (Aug 22)
- Re: Heap-based buffer overflow in zutils zcat Antonio Diaz Diaz (Aug 23)
- Re: Heap-based buffer overflow in zutils zcat Ben Hutchings (Aug 22)