CVE-2017-7476 : Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environmen

Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.

Published 2017-05-02 17:59:00

Updated 2023-02-12 23:30:07

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2017-7476

Gnulib » Gnulib
Versions up to, including, (<=) 2017-04-25
cpe:2.3:a:gnulib:gnulib:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.86%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

http://git.savannah.gnu.org/gitweb/?p=gnulib.git%3Ba=commit%3Bh=94e01571507835ff59dd8ce2a0b56a4b566965a4
http://www.securityfocus.com/bid/98098

Gnulib CVE-2017-7476 Local Heap Overflow Vulnerability
Third Party Advisory;VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445185

1445185 – (CVE-2017-7476) CVE-2017-7476 gnulib: Out-of-bounds write by setting a large TZ variable
Issue Tracking;Patch;Third Party Advisory;VDB Entry
https://security-tracker.debian.org/tracker/CVE-2017-7476

CVE-2017-7476
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1444774

1444774 – heap overflow security issue in date(1) and touch(1)
Exploit;Issue Tracking;Mitigation;Third Party Advisory;VDB Entry

Jump to