CVE-2019-20016 - libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c

Back Back to CVE browser

MEDIUM

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c

Published Dec 27, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.95%

Description

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6f
x_refsource_MISCPatchThird Party Advisory
https://github.com/hoene/libmysofa/issues/83
x_refsource_MISCExploitThird Party Advisory
https://github.com/hoene/libmysofa/issues/84
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f417741388084b70d6f		x_refsource_MISCPatchThird Party Advisory
https://github.com/hoene/libmysofa/issues/83		x_refsource_MISCExploitThird Party Advisory
https://github.com/hoene/libmysofa/issues/84		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 27, 2019

Updated Aug 5, 2024

Reserved Dec 27, 2019

Link CVE-2019-20016

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20016

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20016