The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an “off-by-two error.”
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | dosfstools | < 4.0-1 | dosfstools_4.0-1_all.deb |
Debian | 11 | all | dosfstools | < 4.0-1 | dosfstools_4.0-1_all.deb |
Debian | 10 | all | dosfstools | < 4.0-1 | dosfstools_4.0-1_all.deb |
Debian | 999 | all | dosfstools | < 4.0-1 | dosfstools_4.0-1_all.deb |
Debian | 13 | all | dosfstools | < 4.0-1 | dosfstools_4.0-1_all.deb |