Fedora Account System
Red Hat Associate
Red Hat Customer
Summary: Buffer Overflow in strfmon right-justification padding: <br/> out-of-bounds write in the caller-supplied output buffer caused by using <br/> the post-padding length for the in-place `memmove`.<br/> Requirements to exploit: A reachable application code path must invoke <br/> `strfmon` or `strfmon_l` with right-justified width padding and a <br/> destination buffer that is large enough for `__printf_buffer_pad` to <br/> succeed but not large enough for the subsequent overlong `memmove`. This <br/> may arise through attacker-influenced formatting input or through a fixed <br/> susceptible formatting pattern in the calling application.<br/>