Lucene search

K
osvGoogleOSV:DSA-3221-1
HistoryApr 12, 2015 - 12:00 a.m.

das-watchdog - security update

2015-04-1200:00:00
Google
osv.dev
6

0.0004 Low

EPSS

Percentile

5.1%

Adam Sampson discovered a buffer overflow in the handling of the
XAUTHORITY environment variable in das-watchdog, a watchdog daemon to
ensure a realtime process won’t hang the machine. A local user can
exploit this flaw to escalate his privileges and execute arbitrary
code as root.

For the stable distribution (wheezy), this problem has been fixed in
version 0.9.0-2+deb7u1.

For the unstable distribution (sid), this problem has been fixed in
version 0.9.0-3.1.

We recommend that you upgrade your das-watchdog packages.

CPENameOperatorVersion
das-watchdogeq0.9.0-2

0.0004 Low

EPSS

Percentile

5.1%