| Summary: |
<dev-util/android-tools-0_p20130218 : stack-based buffer overflow flaw in Android Debug Bridge (ADB) client (CVE-2014-1909) |
| Product: |
Gentoo Security
|
Reporter: |
Agostino Sarubbo <ago> |
| Component: |
Vulnerabilities | Assignee: |
Gentoo Security <security> |
| Status: |
RESOLVED
FIXED
|
|
|
| Severity: |
trivial
|
CC: |
sudormrfhalt, zmedico
|
| Priority: |
Normal
|
|
|
| Version: |
unspecified | |
|
| Hardware: |
All | |
|
| OS: |
Linux | |
|
| URL: |
https://bugzilla.redhat.com/show_bug.cgi?id=1062095
|
| Whiteboard: |
~2 [noglsa] |
|
Package list:
|
|
Runtime testing required:
|
---
|
|---|
From ${URL} : Joshua J. Drake of droidsec.org discovered a stack-based buffer overflow flaw in the ADB client code: http://www.droidsec.org/advisories/2014/02/04/two-security-issues-found-in-the-android-sdk-tools.html Connecting to a malicious ADB server could result in arbitrary code execution. A patch is available from the above link. @maintainer(s): since the package has never been marked as stable, we don't need to stabilize it. After the bump, please remove the affected versions from the tree.