Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1234887 - (CVE-2015-4646) CVE-2015-4646 squashfs-tools: stack overflow in read_fragment_table_4 due to fix for CVE-2015-4645
CVE-2015-4646 squashfs-tools: stack overflow in read_fragment_table_4 due to ...
Status: CLOSED WONTFIX
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
impact=moderate,public=20150617,repor...
: Security
Depends On: 1234888
Blocks: 1234889
  Show dependency tree / graph
 
Reported: 2015-06-23 08:57 EDT by Vasyl Kaigorodov
Modified: 2016-01-22 07:31 EST (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2015-10-09 17:01:45 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Vasyl Kaigorodov 2015-06-23 08:57:53 EDT 
After applying CVE-2015-4645 fix, squashfs-tools become vulnerable to stack overflow issue - the stack VLA allocation of fragment_table_index[] can easily exceed RLIMIT_STACK.

Upstream bug report: https://github.com/devttys0/sasquatch/pull/5
Upstream fix: https://github.com/gcanalesb/sasquatch/commit/6777e08cc38bc780d27c69c1d8c272867b74524f
Comment 1 Vasyl Kaigorodov 2015-06-23 08:58:33 EDT 
Created squashfs-tools tracking bugs for this issue:

Affects: fedora-all [bug 1234888]
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.