[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAFsGsxLyEzK1QqLwyRoFcqsbOWOUPJNeLAXfSaCEK7jO_+Py0A@mail.gmail.com>
Date: Thu, 15 May 2014 20:35:51 +0200
From: Marcin Owsiany <porridge@...ian.org>
To: oss-security@...ts.openwall.com
Subject: libgadu vulnerability: possible memory corruption
I'd like to request a CVE ID for the following issue:
A crafted message from the file relay server may cause memory to
beoverwritten. The memory is not overwritten with data sent directly by the
server, but security implications cannot be ruled out.
The bug is public:
http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001171.html
http://lists.ziew.org/pipermail/libgadu-devel/2014-May/001180.html
Marcin
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
