CVE-2017-6596 partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of...
MediumCVSS 5.5
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/partclone(Debian:12) | < 0.2.89-3 | 0.2.89-3 |
| debian/partclone(Debian:13) | < 0.2.89-3 | 0.2.89-3 |
| debian/partclone(Debian:14) | < 0.2.89-3 | 0.2.89-3 |
| partclone project partclone | = 0.2.89 | No fix listed |
References
- Debian Security Tracker CVE-2017-6596 vendor-advisory
- github.com third-party-advisory
- bugs.debian.org issue-tracking