Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 552
Alerts This Week
Warning Icon 1 552

Gentoo Linux Audit GLSA 200807-14 Normal: Buffer Overflow Risk

gentoo
Calendar Grey July 31, 2008
Dist Gentoo Esm H88
A security vulnerability in Linux Audit might allow local users to run unauthorized code. Update your system to mitigate potential threats.
A buffer overflow vulnerability in Linux Audit may allow local attackers to execute arbitrary code.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200807-14
~                                             https://security.gentoo.org/

~   Severity: Normal
~      Title: Linux Audit: Buffer overflow
~       Date: July 31, 2008
~       Bugs: #215705
~         ID: 200807-14


Synopsis
=======
A buffer overflow vulnerability in Linux Audit may allow local
attackers to execute arbitrary code.

Background
=========
Linux Audit is a set of userspace utilities for storing and processing
auditing records.

Affected packages
================
~     -------------------------------------------------------------------
~      Package            /  Vulnerable  /                    Unaffected
~     -------------------------------------------------------------------
~   1  sys-process/audit       < 1.7.3                          >= 1.7.3

==========
A stack-based buffer overflow has been reported in the
audit_log_user_command() function in the fil...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo buffer overflow arbitrary code local attacker normal severity linux audit

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow arbitrary code local attacker normal severity linux audit

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround