Package dosfstools updated to version 4.0-alt1 for branch sisyphus in task 165801.

Published: 2016-06-03
Modified: 2024-11-21

CVE-2015-8872

The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."

Severity: MEDIUM (6.2) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Published: 2016-06-03
Modified: 2024-11-21

CVE-2016-4804

The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.

Severity: MEDIUM (6.2) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Version: 2.1.0

Package dosfstools update in sisyphus on 2016-06-10

ALT-PU-2016-1601-1

Closed vulnerabilities

CVE-2015-8872

CVE-2016-4804