Buffer overflow

2012-10-2223:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.

CPENameOperatorVersion
fwknople2.0.2
fwknopeq2.0
fwknopeq2.0.1

Name	Operator	Version
fwknop	le	2.0.2
fwknop	eq	2.0
fwknop	eq	2.0.1

References

www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html

www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git;a=commitdiff;h=a60f05ad44e824f6230b22f8976399340cb535dc

www.openwall.com/lists/oss-security/2012/09/19/2

www.openwall.com/lists/oss-security/2012/09/20/4