CVE-2015-5957 Memory corruption in n/a
A buffer overflow in Remind allows attackers to cause unspecified impacts, likely code execution or crashes, via a long variable name.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-5957?
CVE-2015-5957 is a critical memory corruption vulnerability in Opensuse Opensuse, published on 28 Sep 2015.
Official description
Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.
Weakness: CWE-119
Which versions are affected by CVE-2015-5957?
It affects 2 products.
Linux distribution packages (1)
remind openSUSE:Tumbleweed | All versions | 3.1.15-1.7 |
Products include Opensuse Opensuse, Roaring Penguin Remind.
How do I fix CVE-2015-5957?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2015-5957 being exploited?
There is no known exploitation of CVE-2015-5957 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2015-5957, DLA-289-1, GHSA-xjp3-rc99-3w6g, MGASA-2015-0299, openSUSE-SU-2024:10089-1.