Lucene search

K
freebsdFreeBSDDA4ADC02-07F4-11EF-960D-5404A68AD561
HistoryApr 29, 2024 - 12:00 a.m.

hcode -- buffer overflow in mail.c

2024-04-2900:00:00
vuxml.freebsd.org
4
hcode
buffer overflow
mail.c
putsdn
static variable
ibuf
range check
buffer overwrite
unix

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

The openSUSE project reports:

The problematic function in question is putSDN() in mail.c. The static variable cp is used as an index for a fixed-sized buffer ibuf. There is a range check: if ( cp >= HDR_BUF_LEN ) ... but under certain circumstances, cp can be incremented beyond the buffer size, leading to a buffer overwrite

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchko-hcode< 2.1.3_2UNKNOWN

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for DA4ADC02-07F4-11EF-960D-5404A68AD561