[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    Re: [oss-security] CVE id request: byacc
From:       "Steven M. Christey" <coley () linus ! mitre ! org>
Date:       2008-07-16 17:48:55
Message-ID: Pine.GSO.4.51.0807161348480.3856 () faron ! mitre ! org
[Download RAW message or body]


======================================================
Name: CVE-2008-3196
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3196
Reference: MLIST:[openbsd-cvs] 20080708 CVS: cvs.openbsd.org: src
Reference: URL:http://marc.info/?l=openbsd-cvs&m=121553004431393&w=2
Reference: MLIST:[openbsd-cvs] 20080708 Re: CVS: cvs.openbsd.org: src
Reference: URL:http://marc.info/?l=openbsd-cvs&m=121553036432044&w=2

skeleton.c in yacc does not properly handle reduction of a rule with
an empty right hand side, which allows context-dependent attackers to
cause an out-of-bounds stack access when the yacc stack pointer points
to the end of the stack.


[prev in list] [next in list] [prev in thread] [next in thread]