libsmi Multiple Unspecified Memory Corruption Vulnerabilities

Bugtraq ID:	64614
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 24 2013 12:00AM
Updated:	Dec 24 2013 12:00AM
Credit:	Thomas Pollet
Vulnerable:	libsmi libsmi 0.4.8
Not Vulnerable:

libsmi Multiple Unspecified Memory Corruption Vulnerabilities

libsmi is prone to multiple unspecified memory-corruption vulnerabilities.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the application that uses the affected library. Failed exploit attempts may result in a denial-of-service condition.

libsmi 0.4.8 is affected; other versions may also be vulnerable.

libsmi Multiple Unspecified Memory Corruption Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libsmi Multiple Unspecified Memory Corruption Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libsmi Multiple Unspecified Memory Corruption Vulnerabilities

References:

• libsmi Homepage (libsmi)
  
• libsmi is full of memory corruption issues (Red Hat Bugzilla)