Bug 10268

Summary:	freetds fix security vulnerability (CVE-2019-13508)
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	RESOLVED NOTABUG	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	alzim, andrey.bondrov, denis.silakov, mc2374
Version:	All
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://advisories.mageia.org/MGASA-2019-0319.html
Whiteboard:
Platform:	---	ROSA Vulnerability identifier:	CVE-2019-13508
RPM Package:	freetds	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2019-11-09 18:43:32 MSK

Felix Wilhelm discovered that FreeTDS incorrectly handled certain types
after a protocol downgrade. A remote attacker could use this issue to
cause FreeTDS to crash, resulting in a denial of service, or possibly
execute arbitrary code (CVE-2019-13508).

Comment 1 Andrey Bondrov 2019-11-11 07:32:34 MSK

Looks like version 0.92.63 is not affected.