https://bugzilla.redhat.com/show_bug.cgi?id=2126073
Bug ID: 2126073
Summary: CVE-2021-40647 sys-apps/man2html: multiple
vulnerabilities
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: ybuenos(a)redhat.com
CC: epel-packagers-sig(a)lists.fedoraproject.org,
orion(a)nwra.com, sergio(a)serjux.com,
tchollingsworth(a)gmail.com, viktor.vix.jancik(a)gmail.com
Target Milestone: ---
Classification: Other
CVE-2021-40647:
In man2html 1.6g, a specific string being read in from a file will overwrite
the size parameter in the top chunk of the heap. This at least causes the
program to segmentation abort if the heap size parameter isn't aligned
correctly. In version before GLIBC version 2.29 and aligned correctly, it
allows arbitrary write anywhere in the programs memory.
https://gist.github.com/untaman/cb58123fe89fc65e3984165db5d40933
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126073