| Summary: | CVE-2017-5209 libplist: base64decode buffer over-read via split encoded Apple Property List data | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Andrej Nemec <anemec> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED NOTABUG | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | bnocera, cfergeau, pbrobinson |
| Target Milestone: | --- | Keywords: | Reopened, Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-05-16 10:04:30 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | 1412614 | ||
| Bug Blocks: | 1432966 | ||
|
Description
Andrej Nemec
2017-01-12 12:47:03 UTC
Created libplist tracking bugs for this issue: Affects: fedora-all [bug 1412614] So this isn't a clean patch due to quite significant refactoring of the base64.c since the last release but looking at the git changelogs there may be other security related issues that should be pulled in too. eg:
commit ae8b7a0f1a5cf569f52f35fc1f113d0c4f354f6e
Author: Nikias Bassen <nikias>
Date: Wed Dec 14 02:32:47 2016 +0100
base64: Prevent use of strlen() in base64decode when input buffer size is known
commit 62bac060ed5ee6d64a71edf6cc627cc184ae87e5
Author: Filippo Bigarella <filippobigarella>
Date: Mon Oct 31 02:43:15 2016 +0100
base64: Prevent buffer overflow by not decoding blocks with less than 4 chars
|