Attachment 157387 Details for Bug 200250 – security/vuxml entry for testdisk

[patch] security/vuxml entry for testdisk

testdisk-vuxml.diff (text/plain), 2.08 KB, created by Jason Unovitch on 2015-06-03 00:45:15 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jason Unovitch

Created: 2015-06-03 00:45:15 UTC

Size: 2.08 KB

patch

obsolete

>Index: security/vuxml/vuln.xml
>===================================================================
>--- security/vuxml/vuln.xml	(revision 388392)
>+++ security/vuxml/vuln.xml	(working copy)
>@@ -57,6 +57,46 @@
> 
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="c67069dc-0986-11e5-bb90-002590263bf5">
>+ <topic>testdisk -- buffer overflow with malicious disk image</topic>
>+ <affects>
>+ <package>
>+	<name>testdisk</name>
>+	<range><lt>7.0</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	CGSecurity TestDisk Changelog reports:
>+	<blockquote cite="http://www.cgsecurity.org/wiki/TestDisk_7.0_Release">
>+	 Various fix including security fix, thanks to:
>+	 <ul>
>+	 <li>Coverity scan (Static Analysis of source code)</li>
>+	 <li>afl-fuzz (security-oriented fuzzer).</li>
>+	 <li>Denis Andzakovic from Security Assessment for reporting an
>+	 exploitable Stack Buffer Overflow.</li>
>+	 </ul>
>+	</blockquote>
>+	Denis Andzakovic reports:
>+	<blockquote cite="http://www.security-assessment.com/files/documents/advisory/Testdisk%20Check_OS2MB%20Stack%20Buffer%20Overflow%20-%20Release.pdf">
>+	 A buffer overflow is triggered within the software when a malicious
>+	 disk image is attempted to be recovered. This may be leveraged by an
>+	 attacker to crash TestDisk and gain control of program execution. An
>+	 attacker would have to coerce the victim to run TestDisk against
>+	 their malicious image.
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <url>http://www.cgsecurity.org/wiki/TestDisk_7.0_Release</url>
>+ <url>http://www.security-assessment.com/files/documents/advisory/Testdisk%20Check_OS2MB%20Stack%20Buffer%20Overflow%20-%20Release.pdf</url>
>+ </references>
>+ <dates>
>+ <discovery>2015-04-30</discovery>
>+ <entry>2015-06-03</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="bbc0db92-084c-11e5-bb90-002590263bf5">
> <topic>hostapd and wpa_supplicant -- multiple vulnerabilities</topic>
> <affects>

Actions: View | Diff

Attachments on bug 200250: 157232 | 157361 | 157387