LibAxl Heap Buffer Overflow Vulnerability
BID:74375
CVE-2015-3450 |Info
LibAxl Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 74375 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2015-3450 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2015 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | J. M. Bogaard |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
LibAxl Heap Buffer Overflow Vulnerability
LibAxl is prone to heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code in the context of the application that uses the affected library. Failed attacks will cause denial-of-service conditions.
LibAxl 0.6.9 and prior are vulnerable.
LibAxl is prone to heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code in the context of the application that uses the affected library. Failed attacks will cause denial-of-service conditions.
LibAxl 0.6.9 and prior are vulnerable.
Exploit / POC
LibAxl Heap Buffer Overflow Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
LibAxl Heap Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
LibAxl Heap Buffer Overflow Vulnerability
References:
References: