Bug 1927742
| Summary: | rpm: integer overflow in hdrblobVerifyRegion() | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | msiddiqu | ||||
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
| Status: | CLOSED NOTABUG | QA Contact: | |||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | unspecified | CC: | aprice, caswilli, dfreiber, drow, ffesti, igor.raits, jberan, jburrell, jsamir, jvasik, kaycoth, mdomonko, mjw, oezr, orabin, packaging-team-maint, pmatilai, pmoravco, rblanco, security-response-team, tcullum, tmeszaro, vkumar, vmugicag, vmukhame | ||||
| Target Milestone: | --- | Keywords: | Security | ||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: |
A potential integer overflow in hdrblobVerifyRegion() if einfo.offset exceeds SIZE_MAX - REGION_TAG_COUNT. This is only possible on 32-bit systems.
|
Story Points: | --- | ||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2021-03-11 23:25:54 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 1912449, 1929558, 1938095 | ||||||
| Attachments: |
|
||||||
|
Description
msiddiqu
2021-02-11 13:09:58 UTC
Acknowledgments: Name: Demi M. Obenour Statement: rpm as shipped in Red Hat Enterprise Linux is not affected by this flaw, as it only applies on 32-bit systems. Only 64-bit is distributed and supported. Please see https://access.redhat.com/solutions/509373 for more information. Created attachment 1758969 [details]
Proposed patch provided by Demi M. Obenour.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2021-20249 |