Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #770657 > unrolled thread

Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp

Started byRoberto C. Sánchez <roberto@connexer.com>
First post2016-09-30 14:00 +0200
Last post2016-10-25 17:50 +0200
Articles 7 — 3 participants

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-09-30 14:00 +0200
    Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-02 02:50 +0200
      Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Salvatore Bonaccorso <carnil@debian.org> - 2016-10-03 14:40 +0200
        Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-03 16:00 +0200
        Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp László Böszörményi (GCS) <gcs@debian.org> - 2016-10-04 23:10 +0200
          Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Salvatore Bonaccorso <carnil@debian.org> - 2016-10-05 07:20 +0200
          Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-25 17:50 +0200

#770657 — Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp

FromRoberto C. Sánchez <roberto@connexer.com>
Date2016-09-30 14:00 +0200
SubjectBug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp
Message-ID<sn4DU-1im-39@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

found 838694 4.8.1.1-12+deb7u3
found 838694 4.8.1.1-12+deb7u5
thanks

On Fri, Sep 23, 2016 at 07:26:28PM +0200, Salvatore Bonaccorso wrote:
> 
> the following vulnerability was published for icu.
> 
> CVE-2016-7415[0]:
> | Stack-based buffer overflow in the Locale class in common/locid.cpp in
> | International Components for Unicode (ICU) through 57.1 for C/C++
> | allows remote attackers to cause a denial of service (application
> | crash) or possibly have unspecified other impact via a long locale
> | string.
> 

I am currently preparing an LTS upload for this vulnerability.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[toc] | [next] | [standalone]

#771085

FromRoberto C. Sánchez <roberto@connexer.com>
Date2016-10-02 02:50 +0200
Message-ID<snD8B-7O3-3@gated-at.bofh.it>
In reply to#770657

[Multipart message — attachments visible in raw view] — view raw

On Fri, Sep 30, 2016 at 07:45:33AM -0400, Roberto C. Sánchez wrote:
> 
> I am currently preparing an LTS upload for this vulnerability.
> 
I tried for quite some time to reproduce this based on the original PHP
bug report, but I was unable.  I have annotated the security tracker
with my (lack of) findings so far.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[toc] | [prev] | [next] | [standalone]

#771331

FromSalvatore Bonaccorso <carnil@debian.org>
Date2016-10-03 14:40 +0200
Message-ID<soaHf-4Vc-3@gated-at.bofh.it>
In reply to#771085
Hi 

On Sat, Oct 01, 2016 at 08:45:20PM -0400, Roberto C. Sánchez wrote:
> On Fri, Sep 30, 2016 at 07:45:33AM -0400, Roberto C. Sánchez wrote:
> > 
> > I am currently preparing an LTS upload for this vulnerability.
> > 
> I tried for quite some time to reproduce this based on the original PHP
> bug report, but I was unable.  I have annotated the security tracker
> with my (lack of) findings so far.

That's okay. Just please remember that lack of reproducibility for an
issue does not mean it's not present. In my initial mail I asked
Laszlo if he can forward this to upstream and/if this is already know
to upstream (which I hope in meanwhile it is). But I have not found an
upstream ticket on this issue yet.

Laszlo, do you know more already? Other distributions seem in the same
boat, like Red Hat in
https://bugzilla.redhat.com/show_bug.cgi?id=1377361#c3 

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#771356

FromRoberto C. Sánchez <roberto@connexer.com>
Date2016-10-03 16:00 +0200
Message-ID<sobWF-5EB-1@gated-at.bofh.it>
In reply to#771331
On Mon, Oct 03, 2016 at 02:37:07PM +0200, Salvatore Bonaccorso wrote:
> Hi 
> 
> On Sat, Oct 01, 2016 at 08:45:20PM -0400, Roberto C. Sánchez wrote:
> > On Fri, Sep 30, 2016 at 07:45:33AM -0400, Roberto C. Sánchez wrote:
> > > 
> > > I am currently preparing an LTS upload for this vulnerability.
> > > 
> > I tried for quite some time to reproduce this based on the original PHP
> > bug report, but I was unable.  I have annotated the security tracker
> > with my (lack of) findings so far.
> 
> That's okay. Just please remember that lack of reproducibility for an
> issue does not mean it's not present. In my initial mail I asked
> Laszlo if he can forward this to upstream and/if this is already know
> to upstream (which I hope in meanwhile it is). But I have not found an
> upstream ticket on this issue yet.
> 
> Laszlo, do you know more already? Other distributions seem in the same
> boat, like Red Hat in
> https://bugzilla.redhat.com/show_bug.cgi?id=1377361#c3 
> 
Good to know.  I can contact upstream if that would help.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[toc] | [prev] | [next] | [standalone]

#771760

FromLászló Böszörményi (GCS) <gcs@debian.org>
Date2016-10-04 23:10 +0200
Message-ID<soF8l-81O-7@gated-at.bofh.it>
In reply to#771331
On Mon, Oct 3, 2016 at 2:37 PM, Salvatore Bonaccorso <carnil@debian.org> wrote:
> On Sat, Oct 01, 2016 at 08:45:20PM -0400, Roberto C. Sánchez wrote:
>> I tried for quite some time to reproduce this based on the original PHP
>> bug report, but I was unable.  I have annotated the security tracker
>> with my (lack of) findings so far.
 That doesn't mean it's not vulnerable as Salvatore already noted.

> Laszlo, do you know more already? Other distributions seem in the same
> boat, like Red Hat in
> https://bugzilla.redhat.com/show_bug.cgi?id=1377361#c3
 Sorry, I was on a trip and just arrived back on Sunday evening. Did
an other security upload and then killed my machine. Minus one
keyboard (a special one) and a monitor. Only now could boot the
remaining hardware.
I don't know more about this issue - upstream keep such bugreports
secret, if any. I don't have a good connection with them (yet), but
will try to know more about this.

Regards,
Laszlo/GCS

[toc] | [prev] | [next] | [standalone]

#771815

FromSalvatore Bonaccorso <carnil@debian.org>
Date2016-10-05 07:20 +0200
Message-ID<soMMx-4Jk-5@gated-at.bofh.it>
In reply to#771760
On Tue, Oct 04, 2016 at 10:59:52PM +0200, László Böszörményi (GCS) wrote:
> > Laszlo, do you know more already? Other distributions seem in the same
> > boat, like Red Hat in
> > https://bugzilla.redhat.com/show_bug.cgi?id=1377361#c3
>  Sorry, I was on a trip and just arrived back on Sunday evening. Did
> an other security upload and then killed my machine. Minus one
> keyboard (a special one) and a monitor. Only now could boot the
> remaining hardware.
> I don't know more about this issue - upstream keep such bugreports
> secret, if any. I don't have a good connection with them (yet), but
> will try to know more about this.

Ack and thanks a lot already!

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#777116

FromRoberto C. Sánchez <roberto@connexer.com>
Date2016-10-25 17:50 +0200
Message-ID<swc9c-7vM-23@gated-at.bofh.it>
In reply to#771760

[Multipart message — attachments visible in raw view] — view raw

On Tue, Oct 04, 2016 at 10:59:52PM +0200, László Böszörményi (GCS) wrote:
> I don't know more about this issue - upstream keep such bugreports
> secret, if any. I don't have a good connection with them (yet), but
> will try to know more about this.
> 
Hi Laszlo,

Have you been able to contact upstream regarding this issue?  Can I help
in any way?

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web