Description
Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted reply in the (1) TLS_readline or (2) SSL_readline function, related to the EchoPingHttps Smokeping probe.
References
- http://sourceforge.net/p/echoping/bugs/55
- [oss-security] 20131021 Re: CVE request: echoping buffer overflow vulnerabilities mailing-list
- [oss-security] 20131017 CVE request: echoping buffer overflow vulnerabilities mailing-list
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606808
- GLSA-201406-07 vendor-advisory