diff options
| author | Robert Clausecker <fuz@fuz.su> | 2021-11-19 09:47:50 +0000 |
|---|---|---|
| committer | Guangyuan Yang <ygy@FreeBSD.org> | 2021-11-19 09:47:50 +0000 |
| commit | 866e2e83cf2879600df62d4111c32333145b3f0c (patch) | |
| tree | 84cc116a3fe533282894d05a9fa3207ebb56e203 | |
| parent | 10357f106a6882153848dcdccd0d7a4e74232bc6 (diff) | |
| download | ports-866e2e83cf2879600df62d4111c32333145b3f0c.tar.gz ports-866e2e83cf2879600df62d4111c32333145b3f0c.zip | |
security/vuxml: Document archivers/advancecomp vulnerabilities
PR: 259534
| -rw-r--r-- | security/vuxml/vuln-2021.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index ae2e7d778fb9..909c8fe96f1e 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,36 @@ + <vuln vid="0bf816f6-3cfe-11ec-86cd-dca632b19f10"> + <topic>advancecomp -- multiple vulnerabilities</topic> + <affects> + <package> + <name>advancecomp</name> + <range><lt>2.1.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Joonun Jang reports:</p> + <blockquote cite="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270"> + <p>heap buffer overflow running advzip with "-l poc" option</p> + <p>Running 'advzip -l poc' with the attached file raises heap buffer overflow + which may allow a remote attacker to cause unspecified impact including denial-of-service attack. + I expected the program to terminate without segfault, but the program crashes as follow. [...] + </p> + </blockquote> + <p>and other vulnerabilities.</p> + </body> + </description> + <references> + <cvename>CVE-2018-1056</cvename> + <cvename>CVE-2019-8379</cvename> + <cvename>CVE-2019-8383</cvename> + <cvename>CVE-2019-9210</cvename> + </references> + <dates> + <discovery>2018-07-29</discovery> + <entry>2021-11-19</entry> + </dates> + </vuln> + <vuln vid="b8c0cbca-472d-11ec-83dc-3065ec8fd3ec"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |