2021-04-03
ALT-BU-2021-3834-1
Branch p9 update bulletin.
Closed vulnerabilities
Published: 2021-11-01
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2021-42917
Buffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.
Severity: MEDIUM (4.3)
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (5.5)
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
- https://github.com/fuzzard/xbmc/commit/80c8138c09598e88b4ddb6dbb279fa193bbb3237
- https://github.com/xbmc/xbmc/commit/48730b64494798705d46dfccc4029bd36d072df3
- https://github.com/xbmc/xbmc/issues/20305
- https://github.com/xbmc/xbmc/pull/20306
- https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
- https://github.com/fuzzard/xbmc/commit/80c8138c09598e88b4ddb6dbb279fa193bbb3237
- https://github.com/xbmc/xbmc/commit/48730b64494798705d46dfccc4029bd36d072df3
- https://github.com/xbmc/xbmc/issues/20305
- https://github.com/xbmc/xbmc/pull/20306
- https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html