REDHAT-BUG-1099776: Medium severity centos libgcc vulnerability
It was reported that the libgadu 1.12.0-rc3 release fixes a memory corruption issue, triggered by a crafted response from a file relay server:
http://www.openwall.com/lists/oss-security/2014/05/15/8
A malicious file relay server could possibly use this flaw to execute arbitrary code in an application that uses libgadu.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1099776?
The severity of REDHAT-BUG-1099776 is classified as high due to the memory corruption vulnerability that can be exploited by a crafted response from a malicious file relay server.
How do I fix REDHAT-BUG-1099776?
To fix REDHAT-BUG-1099776, update libgadu to at least version 1.12.0-rc3 or a later stable release that addresses the vulnerability.
What systems are affected by REDHAT-BUG-1099776?
The systems affected by REDHAT-BUG-1099776 include those running libgadu versions prior to 1.12.0-rc3.
What kind of attack does REDHAT-BUG-1099776 facilitate?
REDHAT-BUG-1099776 facilitates a potential attack where a crafted response from a malicious file relay server can lead to memory corruption.
Is there a CVE associated with REDHAT-BUG-1099776?
There is currently no CVE listed for REDHAT-BUG-1099776, but the issue is significant in terms of security impact.