CVE-2022-1987

NameCVE-2022-1987
DescriptionBuffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libmobi (PTS)sid, trixie, bookworm0.11+dfsg-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libmobisource(unstable)0.11+dfsg-1

Notes

https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f/
https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d (v0.11)

Search for package or bug name: Reporting problems