CVE-2016-2090 Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libbsd(Debian:12) | < 0.8.2-1 | 0.8.2-1 |
| debian/libbsd(Debian:13) | < 0.8.2-1 | 0.8.2-1 |
| debian/libbsd(Debian:14) | < 0.8.2-1 | 0.8.2-1 |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| freedesktop libbsd | < 0.8.2 | 0.8.2 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 19.04 | No fix listed |
| alpine/libbsd(Alpine:v3.2) | < 0.6.0-r2 | 0.6.0-r2 |
| alpine/libbsd(Alpine:v3.3) | < 0.8.2-r0 | 0.8.2-r0 |
| alpine/libbsd(Alpine:v3.4) | < 0.8.2 | 0.8.2 |
References
- Debian Security Tracker CVE-2016-2090 vendor-advisory
- [oss-security] 20160128 Re: Heap buffer overflow in fgetwln function of libbsd mailing-list third-party-advisory
- blog.fuzzing-project.org third-party-advisory
- bugs.freedesktop.org issue-tracking third-party-advisory
- cgit.freedesktop.org issue-tracking patch third-party-advisory
- [debian-lts-announce] 20191230 [SECURITY] [DLA 2052-1] libbsd security update mailing-list third-party-advisory
- FEDORA-2016-d3e562bb52 vendor-advisory
- FEDORA-2016-5c3d057783 vendor-advisory
- GLSA-201607-13 third-party-advisory vendor-advisory
- USN-4243-1 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory