Bug 197067 - dev-lang/mono < 1.2.5-r1 Buffer overflow in BigInteger (CVE-2007-5197)
|
Bug#:
197067
|
Product: Gentoo Security
|
Version: unspecified
|
Platform: All
|
|
OS/Version: Linux
|
Status: RESOLVED
|
Severity: major
|
Priority: P2
|
|
Resolution: FIXED
|
Assigned To: security@gentoo.org
|
Reported By: jaervosz@gentoo.org
|
|
Component: Vulnerabilities
|
|
|
URL:
|
|
Summary: dev-lang/mono < 1.2.5-r1 Buffer overflow in BigInteger (CVE-2007-5197)
|
|
Keywords:
|
|
Status Whiteboard: B1 [glsa]
|
|
Opened: 2007-10-25 19:03 0000
|
Mono 1.2.5 (and earlier release) implementation of BigInteger is vulnerable to
a buffer overflow in it's reduction step of the Montgomery-based Pow methods.
While this affects the most recent Mono version this vulnerability is also
present in all previous releases of Mono.
The issue was found by a security audit (on an unnamed product) using
Mono.Security.dll assembly done by IOActive. They also provided the patch to
fix this issue. They want to coordinate the disclosure with us.
Jurek, if you want stable testing before the coordinated release date noted
above please attach an updated ebuild to this bug. Do NOT commit anything yet.
Also I'm not too familiar with mono so it might be in one of the other mono
packages.
Does it mean they do not want upstream to be notified about this issue? Or have
they already done it? Anyway, I'm all into pushing this forward. After applying
the patch mono-1.2.5.1 builds fine, but I don't have any testcase to see if the
problem is gone. Moreover, I'd also add latexer to CC list, cause he's the lead
:).
An updated ebuild and a patch that actually applies cleanly will follow
Thx Jurek. Upstream have already been informed, I should have mentioned that in
the first place.
Arch security liaisons please test and report back on this bug. Do NOT commit
anything yadayada:)
public now. Jurek, I think you can commit the corrected ebuild.
Arches liaisons, did you get a chance to test it?
Done. We should also stabilize this ASAP.
Seems none of the liaisons tested it till now.
Arches, please test and mark stable dev-lang/mono-1.2.5.1-r1.
Target keywords : "amd64 ppc x86"
