CVE-2014-2978

2014-06-1114:55:00

Debian Security Bug Tracker

security-tracker.debian.org

0.034 Low

EPSS

Percentile

91.4%

JSON

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.

OSVersionArchitecturePackageVersionFilename
Debian12alldirectfb< 1.7.7-11directfb_1.7.7-11_all.deb
Debian11alldirectfb< 1.7.7-9directfb_1.7.7-9_all.deb
Debian10alldirectfb< 1.7.7-9directfb_1.7.7-9_all.deb
Debian999alldirectfb< 1.7.7-13directfb_1.7.7-13_all.deb
Debian13alldirectfb< 1.7.7-13directfb_1.7.7-13_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	directfb	< 1.7.7-11	directfb_1.7.7-11_all.deb
Debian	11	all	directfb	< 1.7.7-9	directfb_1.7.7-9_all.deb
Debian	10	all	directfb	< 1.7.7-9	directfb_1.7.7-9_all.deb
Debian	999	all	directfb	< 1.7.7-13	directfb_1.7.7-13_all.deb
Debian	13	all	directfb	< 1.7.7-13	directfb_1.7.7-13_all.deb

0.034 Low

EPSS

Percentile

91.4%

JSON

Related for DEBIANCVE:CVE-2014-2978