ALT-PU-2026-11035-2

CVE-2014-9862

HIGH7.8

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.

Published: 2016-07-21Modified: 2026-06-16

CVSS 2.0HIGH 7.2

CVSS:2.0/AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00026.html
http://seclists.org/fulldisclosure/2020/Jul/8
http://www.openwall.com/lists/oss-security/2020/07/09/2
http://www.securityfocus.com/bid/91824
http://www.securitytracker.com/id/1036438
https://android.googlesource.com/platform/external/bsdiff/+/4d054795b673855e3a7556c6f2f7ab99ca509998
https://bugs.chromium.org/p/chromium/issues/detail?id=372525
https://chromium.googlesource.com/chromiumos/third_party/bsdiff/+/d0307d1711bd74e51b783a49f9160775aa22e659
https://lists.debian.org/debian-lts-announce/2019/11/msg00028.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:25.bspatch.asc
https://security.gentoo.org/glsa/202003-44
https://support.apple.com/HT206903
https://usn.ubuntu.com/4500-1/
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00026.html
http://seclists.org/fulldisclosure/2020/Jul/8
http://www.openwall.com/lists/oss-security/2020/07/09/2
http://www.securityfocus.com/bid/91824
http://www.securitytracker.com/id/1036438
https://android.googlesource.com/platform/external/bsdiff/+/4d054795b673855e3a7556c6f2f7ab99ca509998
https://bugs.chromium.org/p/chromium/issues/detail?id=372525
https://chromium.googlesource.com/chromiumos/third_party/bsdiff/+/d0307d1711bd74e51b783a49f9160775aa22e659
https://lists.debian.org/debian-lts-announce/2019/11/msg00028.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:25.bspatch.asc
https://security.gentoo.org/glsa/202003-44
https://support.apple.com/HT206903
https://usn.ubuntu.com/4500-1/

CVE-2020-14315

CRITICAL9.8

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

Published: 2020-09-16Modified: 2026-06-16

CVSS 2.0HIGH 7.5

CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS 3.xCRITICAL 9.8

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://bugzilla.redhat.com/show_bug.cgi?id=1856747
https://www.openwall.com/lists/oss-security/2020/07/09/2
https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/
https://bugzilla.redhat.com/show_bug.cgi?id=1856747
https://www.openwall.com/lists/oss-security/2020/07/09/2
https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/

Package update bsdiff in branch c10f2

Closed issues (2)

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.