diff options
| author | Noah Misch | 2015-02-02 15:00:45 +0000 |
|---|---|---|
| committer | Noah Misch | 2015-02-02 15:00:51 +0000 |
| commit | 11f738a8afb9e93ca31cd37331fc640d92b9ec96 (patch) | |
| tree | c8a777d41fcb0d44172895e2ad28d7f827015ca5 /src | |
| parent | 98f2479d8271934ae6ec43a450e11506df015051 (diff) | |
Fix buffer overrun after incomplete read in pullf_read_max().
Most callers pass a stack buffer. The ensuing stack smash can crash the
server, and we have not ruled out the viability of attacks that lead to
privilege escalation. Back-patch to 9.0 (all supported versions).
Marko Tiikkaja
Security: CVE-2015-0243
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions