NVD

Id
31741  
Name
CVE-2014-3564  
Description
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-20  
Modified Date
2016-10-17  
Seq
2014-3564  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
166764 31741 CVE-2014-3564 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgme.git;a=commit;h=2cbd76f7911fc215845e89b50d6af5ff4a83dd77  View
166765 31741 CVE-2014-3564 [oss-security] 20140731 CVE-2014-3564 gpgme: heap-based buffer overflow in gpgsm status handler  View
166766 31741 CVE-2014-3564 DSA-3005  View
166767 31741 CVE-2014-3564 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
166768 31741 CVE-2014-3564 68990  View
166769 31741 CVE-2014-3564 https://bugzilla.redhat.com/show_bug.cgi?id=1113267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16144 JVNDB-2014-005019 GPGME の engine-gpgsm.c および engine-uiserver.c におけるヒープベースのバッファオーバーフローの脆弱性 GPGME の (1) engine-gpgsm.c および (2) engine-uiserver.c の status_handler 関数には、"特定のオーダーによる異なる行の長さ (different line lengths in a specific order)" に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-3564 70852 CVE-2014-3564 31741 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005019.html 2014-07-30 2015-10-30 View