Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can generate a memory corruption via bsdiff of
FreeBSD, in order to trigger a denial of service, and possibly to
run code.

Impacted products: FreeBSD, openSUSE, openSUSE Leap.

Severity: 2/4.

Creation date: 25/07/2016.

DESCRIPTION OF THE VULNERABILITY

The FreeBSD product offers a bspatch tool using bsdiff to generate
a file from a difference file.

However, if the difference file contains a number too large, data
are written in the heap memory of the process.

An attacker can therefore generate a memory corruption via bsdiff
of FreeBSD, in order to trigger a denial of service, and possibly
to run code.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/FreeBSD-memory-corruption-via-bsdiff-20211