|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200406-14] aspell: Buffer overflow in word-list-compress Vulnerability Scan
Vulnerability Scan Summary
aspell: Buffer overflow in word-list-compress
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200406-14
(aspell: Buffer overflow in word-list-compress)
aspell includes a utility for handling wordlists called word-list-compress.
This utility fails to do proper bounds checking when processing words
longer than 256 bytes.
Impact
If a possible hacker could entice a user to handle a wordlist containing very
long word lengths it could result in the execution of arbitrary code with
the permissions of the user running the program.
Workaround
There is no known workaround at this time. All users are encouraged to
upgrade to the latest available version.
References:
http://nettwerked.mg2.org/advisories/wlc
Solution:
All users should upgrade to the latest available version of aspell.
# emerge sync
# emerge -pv ">=app-text/aspell-0.50.5-r4"
# emerge ">=app-text/aspell-0.50.5-r4"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
