| Package | Affected versions | Patched versions |
|---|---|---|
| cvs | = 1.10.7= 1.10.8= 1.11= 1.11.1= 1.11.10= 1.11.11= 1.11.14= 1.11.15= 1.11.16= 1.11.1_p1= 1.11.2= 1.11.3= 1.11.4= 1.11.5= 1.11.6= 1.12.1= 1.12.2= 1.12.5= 1.12.7= 1.12.8 | |
| openpkg | = 1.3= 2.0 | |
| propack | = 2.4= 3.0 |
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free