Upstream information
Description
Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
NVD | |
---|---|
Base Score | 7.5 |
Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | Partial |
SUSE Security Advisories:
- SUSE-SR:2008:006, published Fri, 14 Mar 2008 15:00:00 +0000
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA silc-toolkit-1.1.7-7.23.2 |
SUSE Linux Enterprise Desktop 12 SP1 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Software Development Kit 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Workstation Extension 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Desktop 12 SP2 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP2 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Software Development Kit 12 SP2 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP2 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Desktop 12 SP3 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP3 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Software Development Kit 12 SP3 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP3 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Desktop 12 SP4 |
| Patchnames: SUSE Linux Enterprise Desktop 12 SP4 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Software Development Kit 12 SP4 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP4 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Desktop 12 |
| Patchnames: SUSE Linux Enterprise Desktop 12 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Software Development Kit 12 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Workstation Extension 12 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Workstation Extension 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP2 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP2 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP3 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP3 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP4 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP4 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP5 GA libsilc-1_1-2-1.1.10-24.115 SUSE Linux Enterprise Workstation Extension 12 SP5 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 GA libsilc-1_1-2-1.1.10-24.128 SUSE Linux Enterprise Workstation Extension 12 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Software Development Kit 12 SP1 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Software Development Kit 12 SP2 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP2 GA libsilc-1_1-2-1.1.10-24.115 |
SUSE Linux Enterprise Software Development Kit 12 SP3 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP3 GA libsilc-1_1-2-1.1.10-24.115 |
SUSE Linux Enterprise Software Development Kit 12 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP4 GA libsilc-1_1-2-1.1.10-24.115 |
SUSE Linux Enterprise Software Development Kit 12 SP5 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP5 GA libsilc-1_1-2-1.1.10-24.115 |
SUSE Linux Enterprise Software Development Kit 12 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 12 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 SP1 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP1 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 SP2 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP2 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 SP3 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP3 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 SP4 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP4 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 SP5 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 SP5 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Linux Enterprise Workstation Extension 12 |
| Patchnames: SUSE Linux Enterprise Workstation Extension 12 GA libsilc-1_1-2-1.1.10-24.128 |
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 03:12:08 2013CVE page last modified: Mon Sep 9 16:56:27 2024