Description (CNA)
A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| iucode-tool / iucode-tool | affected starting with v1.4; before v2.1.1 |
CWE
No CWE identifiers supplied.
References
- https://security-tracker.debian.org/tracker/CVE-2017-0357
- https://gitlab.com/iucode-tool/iucode-tool/issues/3
- http://www.securityfocus.com/bid/95432
ADP enrichment
No English description supplied.