Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability

Bugtraq ID:	98098
Class:	Boundary Condition Error
CVE:	CVE-2017-7476
Remote:	No
Local:	Yes
Published:	Apr 24 2017 12:00AM
Updated:	May 02 2017 12:11AM
Credit:	Pádraig Brady
Vulnerable:	GNU Gnulib 0
Not Vulnerable:

Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability

Gnulib is prone to a heap overflow vulnerability.

Attackers may be able to exploit this issue to execute arbitrary code. Failed attack attempts will likely result in denial-of-service conditions.

Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability

References:

• Gnulib Homepage (gnulib)
  
• Bug 1445185 - (CVE-2017-7476) CVE-2017-7476 gnulib: Out-of-bounds write by setti (Redhat)
  
• time_rz: fix heap buffer overflow vulnerability (gnu)