Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecified vectors related to the sprintf function.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial     of service (crash) via unspecified vectors related to the sprintf function. (CVE-2011-0524)

Note that Nessus relies on the presence of the package as reported by the vendor.

The following changes have been made :

  - Add gypsy-CVE-2011-0523.patch: add config file to     restrict the files that can be read. Fix CVE-2011-0523     and bnc#666839.

  - Add gypsy-CVE-2011-0524.patch: use snprintf() to avoid     buffer overflows. Fix CVE-2011-0524 and bnc#666839.

  - Add gnome-common BuildRequires and call to     gnome-autogen.sh for gypsy-CVE-2011-0523.patch, since it     touches the build system.

- New upstream 0.9 release

    - add patch to fix FTBSF due to deprecated g_type_init

    - Fix CVE-2011-0523 - read arbitrary files as the root       user on behalf of a regular user

    - Fix CVE-2011-0524 - buffer overflow in nmea device       input handling (code no longer in existence)

    - aarch64 support

    - Fix segfault

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
217408	Linux Distros Unpatched Vulnerability : CVE-2011-0524	Nessus	Misc.	critical
74681	openSUSE Security Update : gypsy (openSUSE-SU-2012:0884-1)	Nessus	SuSE Local Security Checks	low
66654	Fedora 17 : gypsy-0.9-1.fc17 (2013-8705)	Nessus	Fedora Local Security Checks	low
66649	Fedora 18 : gypsy-0.9-1.fc18 (2013-8687)	Nessus	Fedora Local Security Checks	low
66645	Fedora 19 : gypsy-0.9-1.fc19 (2013-8659)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2011-0524

medium

Tenable Plugins

critical

low

low

low

low