oss-security - CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 17 Nov 2008 14:05:04 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Subject: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

This was fixed in upstream by the maintainer, Mauro Carvalho Chehab.

"[PATCH] V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

There were no check about the limits of shadow.bytes array. This offers
a risk of writing values outside the limits, overriding other data
areas."

Upstream commit: 494264379d186bf806613d27aafb7d88d42f4212

https://bugzilla.redhat.com/show_bug.cgi?id=471835

Please assign a CVE name to this bug.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.