2017-10-16 12:31:07 -04:00
|
|
|
{
|
2018-04-13 13:49:10 +02:00
|
|
|
"CVE_data_meta": {
|
|
|
|
"ASSIGNER": "security@debian.org",
|
|
|
|
"DATE_PUBLIC": "2017-01-12T23:00:00.000Z",
|
|
|
|
"ID": "CVE-2017-0357",
|
|
|
|
"STATE": "PUBLIC",
|
|
|
|
"TITLE": "iucode-tool: heap buffer overflow on -tr loader"
|
2017-10-16 12:31:07 -04:00
|
|
|
},
|
2018-04-13 13:49:10 +02:00
|
|
|
"affects": {
|
|
|
|
"vendor": {
|
|
|
|
"vendor_data": [
|
|
|
|
{
|
|
|
|
"product": {
|
|
|
|
"product_data": [
|
|
|
|
{
|
|
|
|
"product_name": "iucode-tool",
|
|
|
|
"version": {
|
|
|
|
"version_data": [
|
|
|
|
{
|
|
|
|
"version_value": "starting with v1.4; before v2.1.1"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
"vendor_name": "iucode-tool"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"data_format": "MITRE",
|
|
|
|
"data_type": "CVE",
|
|
|
|
"data_version": "4.0",
|
|
|
|
"description": {
|
|
|
|
"description_data": [
|
|
|
|
{
|
|
|
|
"lang": "eng",
|
|
|
|
"value": "A heap-overflow flaw exists in the -tr loader of iucode-tool, potentially leading to SIGSEGV, or heap corruption."
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
"problemtype": {
|
|
|
|
"problemtype_data": [
|
2017-10-16 12:31:07 -04:00
|
|
|
{
|
2018-04-13 13:49:10 +02:00
|
|
|
"description": [
|
|
|
|
{
|
|
|
|
"lang": "eng",
|
|
|
|
"value": "heap-buffer overflow"
|
|
|
|
}
|
|
|
|
]
|
2017-10-16 12:31:07 -04:00
|
|
|
}
|
|
|
|
]
|
2018-04-13 13:49:10 +02:00
|
|
|
},
|
|
|
|
"references": {
|
|
|
|
"reference_data": [
|
|
|
|
{
|
|
|
|
"url": "https://security-tracker.debian.org/tracker/CVE-2017-0357"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"url": "https://gitlab.com/iucode-tool/iucode-tool/issues/3"
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
"source": {
|
|
|
|
"advisory": "https://gitlab.com/iucode-tool/iucode-tool/issues/3",
|
|
|
|
"discovery": "UNKNOWN"
|
2017-10-16 12:31:07 -04:00
|
|
|
}
|
|
|
|
}
|