oss-security - CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Mon, 17 Nov 2008 14:05:04 +0800
From: "Eugene Teo" <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
Subject: CVE request: kernel: V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

This was fixed in upstream by the maintainer, Mauro Carvalho Chehab.

"[PATCH] V4L/DVB (9621): Avoid writing outside shadow.bytes[] array

There were no check about the limits of shadow.bytes array. This offers
a risk of writing values outside the limits, overriding other data
areas."

Upstream commit: 494264379d186bf806613d27aafb7d88d42f4212

https://bugzilla.redhat.com/show_bug.cgi?id=471835

Please assign a CVE name to this bug.

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.