Date: Thu, 18 Jun 2015 13:05:12 -0400 (EDT) From: cve-assign@...re.org To: gcanalesb@...com Cc: cve-assign@...re.org, oss-security@...ts.openwall.com Subject: Re: Possible CVE Request: Multiple stack overflows in squashfs-tools and sasquatch -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> As far as we can tell, there are two independent types of problems: >> We would guess that the most likely case is that only 3 and 6 are >> applicable, i.e., the code problems are found only in >> unsquash-1.c/unsquash-2.c/unsquash-3.c/unsquash-4.c and all of these >> files exist in both squashfs-tools and sasquatch. Is this correct? > Yes, that is correct. >> - "int bytes" is incorrect because the return value of >> SQUASHFS_FRAGMENT_BYTES can be larger than the maximum >> value of a signed int Use CVE-2015-4645. >> - pull/5 says "If we fix this by making the variable size_t, we run >> into an unrelated problem in which the stack VLA allocation of >> fragment_table_index can easily exceed RLIMIT_STACK" but >> actually RLIMIT_STACK can be exceeded regardless of the data type >> of the bytes variable Use CVE-2015-4646. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJVgvnhAAoJEKllVAevmvms1oMH/iee0wchZqLNcdv94boq7Nu3 5AWJOLkFZjxAZrlyPvKS0e5wpnRO8Crc9ERLq4ndEzg/l5SFn1QSqgQ4eve7BiR7 rReKZo3m67lLBjn2g+eODNgg+SRp0wxzFallB9UnjX5zaE282/toIIj4+7AvPpXN DVEgh96AnIUr0NyI5CsUDp6LJj75m96HOVz3iV4tYsiu2RK03eOjpm2TX9gqj8yT 3AZiXAYx4TkHq34BZMh9zMl762vENMj3ylGfB+/PFUIoQYdilxEbfquX2szZP6KL gLteXkodoHfFN2sagP0pg/t5CNRPeLOqJYW+C04k2/Je7DEglZoJnJq5FKEeRyI= =iU1A -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.