Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.
    (CVE-2016-10375)

Note that Nessus relies on the presence of the package as reported by the vendor.

An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability.

For Debian 8 'Jessie', this problem has been fixed in version 3.04.00-1+deb8u1.

We recommend that you upgrade your yodl packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for yodl fixes the following issues :

  - CVE-2016-10375 invalid memory read in queue_push could     lead to Denial of service (boo#1040917)

Hanno Bock discovered that there was a buffer over-read vulnerability in the yodl ('Your Own Document Language') document processor.

For Debian 7 'Wheezy', this issue has been fixed in yodl version 3.00.0-6+deb7u1.

We recommend that you upgrade your yodl packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
253961	Linux Distros Unpatched Vulnerability : CVE-2016-10375	Nessus	Misc.	critical
136203	Debian DLA-2194-1 : yodl security update	Nessus	Debian Local Security Checks	critical
100712	openSUSE Security Update : yodl (openSUSE-2017-667)	Nessus	SuSE Local Security Checks	critical
100622	Debian DLA-976-1 : yodl security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2016-10375

critical

Tenable Plugins

critical

critical

critical

critical