Menu

#294 CVE-2022-35018 advancecomp: SEGV via invalid read memory access

other
closed-fixed
nobody
None
5
2022-11-23
2022-11-22
Ben Beasley
No

Advancecomp v2.3 was discovered to contain a segmentation fault.

https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35018.md
https://drive.google.com/file/d/1ChqmPdrjId87582a-o5ogWyEI8goRVWJ/view?usp=sharing

This was reported downstream in Fedora Linux and Fedora EPEL, where I’m the current maintainer of the advancecomp package.

Discussion

  • Andrea Mazzoleni

    • status: open --> closed-fixed
     
  • Andrea Mazzoleni

    Fixed in github with the commit "Check move chunk"

     
  • Ben Beasley

    Ben Beasley - 2022-11-23

    Thank you for the quick investigation and fix.

     

Log in to post a comment.