Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 8: 2021-0414 Moderate: Libspf2 Buffer Overflow Risk

mageia
Calendar Grey September 4, 2021
Dist Mageia Esm H88
Mageia 2021-0414 improves libspf2 to mitigate buffer overflow vulnerabilities, bolstering defense against possible attacks.
A stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF...

Summary

A stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages (CVE-2021-20314).

References

- https://bugs.mageia.org/show_bug.cgi?id=29361

- https://www.openwall.com/lists/oss-security/2021/08/11/6

- https://www.cve.org/CVERecord?id=CVE-2021-20314

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow software update code execution libspf2 mageia

Resolution

SRPMS

- 8/core/libspf2-1.2.10-5.1.mga8

Publication date: 04 Sep 2021
URL: https://advisories.mageia.org/MGASA-2021-0414.html
Type: security
CVE: CVE-2021-20314

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow software update code execution libspf2 mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here