Description
Integer overflow in the load_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attackers to execute arbitrary code via a (1) file or (2) socket that provides configuration data with many entries, leading to a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gnustep-base | 1.19.3-2 | — |
| Debian 13 | gnustep-base | 1.19.3-2 | — |
| Debian 12 | gnustep-base | 1.19.3-2 | — |
References
- 39746 third-party-advisory
- http://savannah.gnu.org/bugs/?29755
- http://thread.gmane.org/gmane.comp.lib.gnustep.bugs/12336
- http://ftpmain.gnustep.org/pub/gnustep/core/gnustep-base-1.20.0.tar.gz
- [oss-security] 20100507 Re: CVE Assignment (gnustep) mailing-list
- [oss-security] 20100507 Re: CVE Assignment (gnustep) mailing-list
- https://bugs.launchpad.net/ubuntu/+source/gnustep-base/+bug/573108