Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Link | Tags |
---|---|
https://www.openwall.com/lists/oss-security/2022/08/05/1 | third party advisory mailing list |
https://osdn.net/projects/freeciv/ticket/45299 | third party advisory patch |
https://bugs.debian.org/1017579 | third party advisory mailing list |
http://www.openwall.com/lists/oss-security/2022/08/31/1 | third party advisory mailing list |