CVE-2014-9862 Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (hea...
HighCVSS 7.8
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bsdiff(Debian:12) | < 4.3-17 | 4.3-17 |
| debian/bsdiff(Debian:13) | < 4.3-17 | 4.3-17 |
| debian/bsdiff(Debian:14) | < 4.3-17 | 4.3-17 |
| apple mac os x | <= 10.11.5 | No fix listed |
References
- Debian Security Tracker CVE-2014-9862 vendor-advisory
- APPLE-SA-2016-07-18-1 mailing-list vendor-advisory
- openSUSE-SU-2016:1977 vendor-advisory
- 20200709 X41 D-Sec GmbH Security Advisory X41-2020-006: Memory Corruption Vulnerability in bspatch mailing-list
- [oss-security] 20200709 X41 D-Sec GmbH Security Advisory X41-2020-006: Memory Corruption Vulnerability in bspatch mailing-list
- 91824 vdb-entry
- 1036438 vdb-entry
- android.googlesource.com issue-tracking
- bugs.chromium.org issue-tracking
- chromium.googlesource.com issue-tracking
- [debian-lts-announce] 20191126 [SECURITY] [DLA 2010-1] bsdiff security update mailing-list
- FreeBSD-SA-16:25 vendor-advisory
- GLSA-202003-44 vendor-advisory
- support.apple.com vendor-advisory
- USN-4500-1 vendor-advisory