oss-sec mailing list archives

Re: Bug#771125: CVE request: mutt: heap-based buffer overflow in mutt_substrdup()

From: Antonio Radici <antonio () dyne org>
Date: Thu, 27 Nov 2014 11:37:51 +0000

On Thu, Nov 27, 2014 at 02:49:27PM +1100, Murray McAllister wrote:

Good morning,

Jakub Wilk reported a crash in mutt:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771125

Looking in mutt-1.5.23-2.fc20.x86_64:

[...]

I'll have a patch/solution ready for this by tonight; thanks for reporting it.

Current thread:

CVE request: mutt: heap-based buffer overflow in mutt_substrdup() Murray McAllister (Nov 26)
- Re: CVE request: mutt: heap-based buffer overflow in mutt_substrdup() Murray McAllister (Nov 26)
  - Bug#771125: Info received ([oss-security] CVE request: mutt: heap-based buffer overflow in mutt_substrdup()) Debian Bug Tracking System (Nov 27)
    - CC'ing external lists/bugs (Re: [oss-security] Bug#771125: Info received ([oss-security] CVE request: mutt: heap-based buffer overflow in mutt_substrdup())) Solar Designer (Nov 27)
    - Re: CC'ing external lists/bugs Jakub Wilk (Nov 29)
- Re: CVE request: mutt: heap-based buffer overflow in mutt_substrdup() cve-assign (Nov 26)
- Re: Bug#771125: CVE request: mutt: heap-based buffer overflow in mutt_substrdup() Antonio Radici (Nov 27)