portage-ng / portage / sys-fs / exfat-utils / 1.4.0
portage-ng glsa
1 advisory reference sys-fs/exfat-utils · none place version 1.4.0 in a vulnerable range
▸ GLSA 201612-31 exFAT: Multiple vulnerabilities this version unaffected normal remote 2016-12-12

Two vulnerabilities have been found in exFAT allowing remote attackers to execute arbitrary code or cause Denial of Service.

Announced
2016-12-12
Revised
2016-12-12
Access
remote
Bugs
#563936
Advisory
https://security.gentoo.org/glsa/201612-31

Affected packages

PackageArchVulnerableUnaffected
sys-fs/exfat-utils*< 1.2.1>= 1.2.1

Background

A full-featured exFAT file system implementation for Unix-like systems.

Description

Two vulnerabilities were found in exFAT. A malformed input can cause a write heap overflow or cause an endless loop.

Impact

Remote attackers could execute arbitrary code or cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All exFAT users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-fs/exfat-utils-1.2.1"

References