CVE-2016-1243: Buffer Overflow
Published Sep 19, 2016
·Updated
Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname.
Affected Software
5 affected componentsFixes available
debian/unadf<=0.7.11a-3, <=0.7.11a-4
0.7.11a-3+deb8u10.7.11a-60.7.11a-5+deb12u1
debian/unadf
0.7.11a-4+deb11u10.7.11a-5+deb12u10.7.11a-7
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Unadf Project Unadf=1.0
Remediation
Patch Available
Event History
Oct 3, 2016
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1243?
CVE-2016-1243 is a high severity vulnerability due to its potential for remote code execution via a stack-based buffer overflow.
2
How do I fix CVE-2016-1243?
To fix CVE-2016-1243, upgrade the unADF package to versions 0.7.11a-4+deb11u1, 0.7.11a-5+deb12u1, or 0.7.11a-7.
3
What systems are affected by CVE-2016-1243?
CVE-2016-1243 affects various Debian Linux versions and the unADF project version 1.0.
4
Can CVE-2016-1243 lead to data loss?
Yes, exploitation of CVE-2016-1243 could potentially lead to data loss or unauthorized access to sensitive information.
5
Are there any workarounds for CVE-2016-1243?
Currently, there are no recommended workarounds for CVE-2016-1243 other than applying the security updates.