Heap-based buffer overflow in cvs (Alpine package)

1) Heap-based buffer overflow

EUVDB-ID: #VU29257

Risk: Medium

CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2012-0804

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in proxy_connect function in src/client.c in CVS when processing HTTP responses. A remote attacker can pass specially crafted data to the application, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cvs (Alpine package): 1.11.23-r0

CPE2.3

• cpe:2.3:a:alpine:cvs_alpine_package:1.11.23-r0:*:*:*:*:alpine_linux:*:1.9

External links

https://git.alpinelinux.org/aports/commit/?id=254098d5ef34e30120e51a521573ed7eb0666100
https://git.alpinelinux.org/aports/commit/?id=f4d7bda112c1d5a48b63c0d4c8f0949df43e7e97
https://git.alpinelinux.org/aports/commit/?id=ea612159fb42a3276203bef5c374da467d8b049b
https://git.alpinelinux.org/aports/commit/?id=8cdd93154aeb43702a196270e3818bf2466c3e0c
https://git.alpinelinux.org/aports/commit/?id=ff0ba778a6651a6d66c94171e62dd4644c239039

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.