Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 10 DLA-3078-1 Critical: KiCad Buffer Overflow Fix

debian lts
Calendar Grey August 20, 2022
Dist Debian Esm H88
Debian LTS Advisory DLA-3080-1 focuses on the update of gimp to rectify memory management vulnerabilities, ensuring improved protection.
KiCad is a suite of programs for the creation of printed circuit boards
Topics%20covered

Topics Covered

security advisory buffer overflow critical debian patch kicad

Summary

Several buffer-overflows were discovered in the Gerber Viewer and excellon
file parser, that could lead to code execution when opening a
maliciously-crafted file.

CVE-2022-23803

A stack-based buffer overflow vulnerability exists in the Gerber Viewer
gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad
EDA.

CVE-2022-23804

A stack-based buffer overflow vulnerability exists in the Gerber Viewer
gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad
EDA.

CVE-2022-23946

A stack-based buffer overflow vulnerability exists in the Gerber Viewer
gerber and excellon GCodeNumber parsing functionality of KiCad EDA.

CVE-2022-23947

A stack-based buffer overflow vulnerability exists in the Gerber Viewer
gerber and excellon DCodeNumber parsing functionality of KiCad EDA.

For Debian 10 buster, these problems have been fixed in version
5.0.2+dfsg1-1+deb10u1.
These problems were previously dealt with in DLA-2998-1 for Debian 9 stretch,

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: kicad
Version: 5.0.2+dfsg1-1+deb10u1
CVE ID: CVE-2022-23803 CVE-2022-23804 CVE-2022-23946 CVE-2022-23947

Topics%20covered

Topics Covered

security advisory buffer overflow critical debian patch kicad

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here