Debian/bsdiff: critical 9.8
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sani
Action: Upgrade bsdiff to 4.3-22 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3-22 | - |
Fixed versions
| 4.3-22 |
Sources
- osv: DEBIAN-CVE-2020-14315#Debian:13/bsdiff
- https://security-tracker.debian.org/tracker/CVE-2020-14315
published · modified · JSON