Errata ID | 326 |
---|---|
Date | 2018-04-18 |
Source package | augeas |
Fixed in version | 1.2.0-0.2+deb8u2 |
Description | This update addresses the following issue: * Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution. (CVE-2017-7555) |
Additional notes | |
CVE ID | CVE-2017-7555 |
UCS Bug number | #45356 |