CVE-2016-10721

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-10721

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10721.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2016-10721

Related

UBUNTU-CVE-2016-10721

Published

2018-05-02T23:29:00Z

Modified

2024-11-21T02:44:35Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

References

Affected packages

Debian:11 / partclone

Package

Name: partclone
Purl: pkg:deb/debian/partclone?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.88-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / partclone

Package

Name: partclone
Purl: pkg:deb/debian/partclone?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.88-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / partclone

Package

Name: partclone
Purl: pkg:deb/debian/partclone?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.88-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}