Description
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | boinc | 7.0.65+dfsg-1 | — |
| Debian 13 | boinc | 7.0.65+dfsg-1 | — |
| Debian 12 | boinc | 7.0.65+dfsg-1 | — |
References
- [oss-security] 20130428 Multiple vulnerabilities in BOINC mailing-list
- FEDORA-2013-23734 vendor-advisory
- 53192 third-party-advisory
- boinc-cve20132298-bo(83931) vdb-entry
- http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=2fea03824925cbcb976f4191f4d8321e41a4d95b
- [boinc_projects] 20130227 security patches for scheduler mailing-list
- FEDORA-2013-23720 vendor-advisory
- 59539 vdb-entry