diff options
| author | Xin LI <delphij@FreeBSD.org> | 2008-03-20 23:43:36 +0000 |
|---|---|---|
| committer | Xin LI <delphij@FreeBSD.org> | 2008-03-20 23:43:36 +0000 |
| commit | 0febd1bf2b8e92024896f8cea3863c353de99ae5 (patch) | |
| tree | 36a7acb913cf06a32a421316815ac4f19f43ebfa /security | |
| parent | - Fix Log dir (diff) | |
Document bzip2 crash with certain malformed archive files
Notes
Notes:
svn path=/head/; revision=209509
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 8d21e18a94a2..25eed9f3402d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,37 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="063399fc-f6d6-11dc-bcee-001c2514716c"> + <topic>bzip2 -- crash with certain malformed archive files</topic> + <affects> + <package> + <name>bzip2</name> + <range><lt>1.0.5</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>SecurityFocus reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/28286/"> + <p>The 'bzip2' application is prone to a remote file-handling + vulnerability because the application fails to properly + handle malformed files.</p> + <p>Exploit attempts likely result in application crashes.</p> + </blockquote> + </body> + </description> + <references> + <bid>28286</bid> + <cvename>CVE-2008-1372</cvename> + <url>https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html</url> + <url>http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/</url> + </references> + <dates> + <discovery>2008-03-18</discovery> + <entry>2008-03-20</entry> + </dates> + </vuln> + <vuln vid="9cfbca7f-efb7-11dc-be01-0211060005df"> <topic>qemu -- unchecked block read/write vulnerability</topic> <affects> |