CVE-2014-0469 Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subjec...
MediumCVSS 6.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xbuffy(Debian:12) | < 3.3.bl.3.dfsg-9 | 3.3.bl.3.dfsg-9 |
| debian/xbuffy(Debian:13) | < 3.3.bl.3.dfsg-9 | 3.3.bl.3.dfsg-9 |
| debian/xbuffy(Debian:14) | < 3.3.bl.3.dfsg-9 | 3.3.bl.3.dfsg-9 |
| debian/xbuffy | <= 3.3.bl.3.dfsg-8 | No fix listed |
| debian/xbuffy | = 3.2.1-1 | No fix listed |
| debian/xbuffy | = 3.2.1-2 | No fix listed |
| debian/xbuffy | = 3.2.1-3 | No fix listed |
| debian/xbuffy | = 3.2.1-4 | No fix listed |
| debian/xbuffy | = 3.3-1 | No fix listed |
| debian/xbuffy | = 3.3.b1.3-4 | No fix listed |
| debian/xbuffy | = 3.3.bl.2-1 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-1 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-2 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-3 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-5 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-6 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-7 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-8 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-9 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-10 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-11 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-12 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-13 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-14 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-15 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xbuffy | = 3.3.bl.3-16 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-17 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-18 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-19 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-20 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-21 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-22 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-23 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-24 | No fix listed |
| debian/xbuffy | = 3.3.bl.3-25 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-1 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-2 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-3 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-4 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-5 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-6 | No fix listed |
| debian/xbuffy | = 3.3.bl.3.dfsg-7 | No fix listed |
References
- Debian Security Tracker CVE-2014-0469 vendor-advisory
- packages.qa.debian.org
- DSA-2921 vendor-advisory
- [oss-security] 20140428 CVE-2014-0469: xbuffy stack-based buffer overflow in subject processing mailing-list
- 67090 vdb-entry