9012 2016-01-28 15:52:18 +0000 CVE-2016-2090; Heap buffer overflow in fgetwln function of libbsd 2016-05-11 07:02:06 +0000 1 1 7 Build System, Metadata & Runtime OE-Core core 2.1 x86 Multiple VERIFIED FIXED Medium normal 2.1 M3 1 akuster akuster bogdanx.a.voiculescu meta.mr.watcher meta.watcher bogdanx.a.voiculescu --- --- Don't know oldest_to_newest 58303 0 akuster 2016-01-28 15:52:18 +0000 https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html libbsd is a library to provide common functions from BSD systems on Linux. libbsd 0.8.1 and earlier contains a buffer overflow in the function fgetwln(). An if checks if it is necessary to reallocate memory in the target buffer. However this check is off by one, therefore an out of bounds write happens. Upstream has released version 0.8.2 to fix this. I have checked where this function gets used. I didn't find any code using it, so I assume the impact is limited. This bug was found with the help of Address Sanitizer. https://bugs.freedesktop.org/show_bug.cgi?id=93881 http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 58307 1 akuster 2016-01-28 16:07:37 +0000 master: is at 0.8.1 jethro and fido: 0.7.0 59305 2 akuster 2016-02-20 00:53:35 +0000 jethro: http://cgit.openembedded.org/openembedded-core/commit/?h=jethro&id=e56aba3a822f072f8ed2062a691762a4a970a3f0 fido: http://cgit.openembedded.org/openembedded-core/commit/?h=fido&id=ab29efb8e85020a3621079c7fde217c1bfaa5289 master was updated to 0.8.2 62082 3 bogdanx.a.voiculescu 2016-05-11 07:02:06 +0000 Verified on: fido: 6b2102cd59c1ac48b8550dbbea0b83eada7e7b32 jethro: 6b2102cd59c1ac48b8550dbbea0b83eada7e7b32 master 7ca60ec8bff7656b4e52f5a4d238913e851da089