Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

Gentoo: GLSA 200711-21 High Severity: Bochs Execution Risk

gentoo
Calendar Grey November 18, 2007
Scroller Gentoo
Several security flaws in Bochs may lead to unauthorized code execution or Denial of Service on Gentoo platforms. Take immediate action!
Multiple vulnerabilities have been discovered in Bochs, possibly allowing for the execution of arbitrary code or a Denial of Service.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-21
                                            https://security.gentoo.org/

  Severity: High
     Title: Bochs: Multiple vulnerabilities
      Date: November 17, 2007
      Bugs: #188148
        ID: 200711-21


Synopsis
=======
Multiple vulnerabilities have been discovered in Bochs, possibly
allowing for the execution of arbitrary code or a Denial of Service.

Background
=========
Bochs is a IA-32 (x86) PC emulator written in C++.

Affected packages
================
    -------------------------------------------------------------------
     Package              /  Vulnerable  /                  Unaffected
    -------------------------------------------------------------------
  1  app-emulation/bochs        < 2.3                           >= 2.3

==========
Tavis Ormandy of the Google Security Team discovered a heap-based
overflow vulnerability in the NE2000 driver (CVE-200...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo code execution arbitrary code bochs

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo code execution arbitrary code bochs

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround