| Package | Affected versions | Patched versions |
|---|---|---|
| pan | = 0.105= 0.106= 0.107= 0.108= 0.109= 0.110= 0.111= 0.112= 0.113= 0.114= 0.115= 0.116= 0.117= 0.118= 0.119= 0.120= 0.121= 0.122= 0.123= 0.124= 0.125= 0.126= 0.127= 0.128= 0.129= 0.130= 0.131≤ 0.132 |
The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free