Description
The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154355.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155382.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154321.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1199925 ↗