aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorjunovitch <junovitch@FreeBSD.org>2015-11-22 10:12:43 +0800
committerjunovitch <junovitch@FreeBSD.org>2015-11-22 10:12:43 +0800
commit7d4a373ac8d3659706ea67f99f51f83ec48a4478 (patch)
treef699896b5be2be296f57717654e0bfdfb47cc115 /security
parentf29bd25517e631f6f5c2a30163002779b89500c1 (diff)
downloadfreebsd-ports-gnome-7d4a373ac8d3659706ea67f99f51f83ec48a4478.tar.gz
freebsd-ports-gnome-7d4a373ac8d3659706ea67f99f51f83ec48a4478.tar.zst
freebsd-ports-gnome-7d4a373ac8d3659706ea67f99f51f83ec48a4478.zip
Document code execution via a format string vulnerability in a2ps
Security: CVE-2015-8107 Security: https://vuxml.FreeBSD.org/freebsd/e359051d-90bd-11e5-bd18-002590263bf5.html
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 8802107782a9..e2acb59c1b80 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -58,6 +58,33 @@ Notes:
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="e359051d-90bd-11e5-bd18-002590263bf5">
+ <topic>a2ps -- format string vulnerability</topic>
+ <affects>
+ <package>
+ <name>a2ps</name>
+ <range><lt>4.13b_8</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Jong-Gwon Kim reports:</p>
+ <blockquote cite="http://www.openwall.com/lists/oss-security/2015/11/16/4">
+ <p>When user runs a2ps with malicious crafted pro(a2ps prologue) file,
+ an attacker can execute arbitrary code.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2015-8107</cvename>
+ <url>http://www.openwall.com/lists/oss-security/2015/11/16/4</url>
+ </references>
+ <dates>
+ <discovery>2015-11-16</discovery>
+ <entry>2015-11-22</entry>
+ </dates>
+ </vuln>
+
<vuln vid="ecc268f2-8fc2-11e5-918c-bcaec565249c">
<topic>libxslt -- DoS vulnability due to type confusing error</topic>
<affects>