Skip to content
OpenAdvisories
Unscored CVE-2016-10722 EUVD-2016-1721GHSA-x4mv-vp4m-f5w6

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT s…

Published May 2, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 partclone 0.2.88-1 —
Debian 13 partclone 0.2.88-1 —
Debian 12 partclone 0.2.88-1 —
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS partclone No fix yet —

References