CVE-2010-2947 Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jan engelhardt libhx | <= 3.5 | No fix listed |
| jan engelhardt libhx | = 1.10.0 | No fix listed |
| jan engelhardt libhx | = 1.10.1 | No fix listed |
| jan engelhardt libhx | = 1.10.2 | No fix listed |
| jan engelhardt libhx | = 1.15 | No fix listed |
| jan engelhardt libhx | = 1.17 | No fix listed |
| jan engelhardt libhx | = 1.18 | No fix listed |
| jan engelhardt libhx | = 1.22 | No fix listed |
| jan engelhardt libhx | = 1.23 | No fix listed |
| jan engelhardt libhx | = 1.25 | No fix listed |
| jan engelhardt libhx | = 1.26 | No fix listed |
| jan engelhardt libhx | = 1.27 | No fix listed |
| jan engelhardt libhx | = 1.28 | No fix listed |
| jan engelhardt libhx | = 2.0 | No fix listed |
| jan engelhardt libhx | = 2.1 | No fix listed |
| jan engelhardt libhx | = 2.2 | No fix listed |
| jan engelhardt libhx | = 2.3 | No fix listed |
| jan engelhardt libhx | = 2.4 | No fix listed |
| jan engelhardt libhx | = 2.5 | No fix listed |
| jan engelhardt libhx | = 2.6 | No fix listed |
| jan engelhardt libhx | = 2.7 | No fix listed |
| jan engelhardt libhx | = 2.8 | No fix listed |
| jan engelhardt libhx | = 2.9 | No fix listed |
| jan engelhardt libhx | = 3.0 | No fix listed |
| jan engelhardt libhx | = 3.0.1 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| jan engelhardt libhx | = 3.1 | No fix listed |
| jan engelhardt libhx | = 3.2 | No fix listed |
| jan engelhardt libhx | = 3.3 | No fix listed |
| jan engelhardt libhx | = 3.4 | No fix listed |
| debian/libhx(Debian:12) | < 3.5-2 | 3.5-2 |
| debian/libhx(Debian:13) | < 3.5-2 | 3.5-2 |
| debian/libhx(Debian:14) | < 3.5-2 | 3.5-2 |
References
- libhx.git.sourceforge.net
- SUSE-SR:2010:019 vendor-advisory
- MDVSA-2010:165 vendor-advisory
- [oss-security] 20100820 Re: CVE Request: heap-based buffer overflow in libHX mailing-list
- [oss-security] 20100820 CVE Request: heap-based buffer overflow in libHX mailing-list
- 42592 vdb-entry
- ADV-2010-2232 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2010-2947 vendor-advisory
- bugs.debian.org issue-tracking