Bug 1395209 (CVE-2015-8972)

Summary:	CVE-2015-8972 gnuchess: Stack-based buffer overflow on user move input
Product:	[Other] Security Response	Reporter:	Adam Mariš <amaris>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	caillon+fedoraproject, dkholia, gwync, karsten
Target Milestone:	---	Keywords:	Reopened, Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	gnuchess 6.2.4	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-17 08:53:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1395210

Description Adam Mariš 2016-11-15 12:13:38 UTC

A stack-based buffer overflow that can be triggered by supplying user move input larger than 128 bytes was found in gnuchess.

Upstream bug report:

https://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.html

Upstream patch:

http://svn.savannah.gnu.org/viewvc?view=rev&root=chess&revision=134

CVE assignment:

http://seclists.org/oss-sec/2016/q4/426

Comment 1 Gwyn Ciesla 2016-11-15 13:43:44 UTC

6.2.4 is in rawhide, stable f24 and f23.  The update is on it's way to stable in f25.

Comment 2 Martin Prpič 2016-11-16 07:51:10 UTC

(In reply to Jon Ciesla from comment #1)
> 6.2.4 is in rawhide, stable f24 and f23.  The update is on it's way to
> stable in f25.

Please do not close bugs against the Security Response component. This bug tracks the issue across many products, not just Fedora.