834010 – (CVE-2021-3700) <sys-apps/usbredir-0.12.0: use-after-free

Bug 834010 (CVE-2021-3700) - <sys-apps/usbredir-0.12.0: use-after-free

Summary: <sys-apps/usbredir-0.12.0: use-after-free

Status:	IN_PROGRESS

Alias:	CVE-2021-3700

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:	https://gitlab.freedesktop.org/spice/...
Whiteboard:	B3 [glsa?]
Keywords:

Depends on:	834022
Blocks:
	Show dependency tree

Reported:	2022-02-24 22:28 UTC by John Helmert III
Modified:	2022-02-26 15:10 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2022-02-24 22:28:55 UTC

CVE-2021-3700 (https://bugzilla.redhat.com/show_bug.cgi?id=1992830):

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination.

Comment 1 John Helmert III archtester

2022-02-25 22:51:02 UTC

Please cleanup

Comment 2 Larry the Git Cow gentoo-dev

2022-02-26 08:33:31 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6155841f76ceaeaab548ff7be7eff3b7485b58b1

commit 6155841f76ceaeaab548ff7be7eff3b7485b58b1
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2022-02-26 08:33:00 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2022-02-26 08:33:00 +0000

    sys-apps/usbredir: drop 0.9.0
    
    Bug: https://bugs.gentoo.org/834010
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 sys-apps/usbredir/Manifest              |  1 -
 sys-apps/usbredir/usbredir-0.9.0.ebuild | 45 ---------------------------------
 2 files changed, 46 deletions(-)