tocsin

Debian/linux: high 7.8

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Andr

Action: Upgrade linux to 4.16.5-1 or later.

Affected

introducedfixedlast affected
04.16.5-1-

Fixed versions

4.16.5-1

Sources

published · modified · JSON