CVE-2017-6596

Source
https://nvd.nist.gov/vuln/detail/CVE-2017-6596
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6596.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-6596
Related
Published
2017-03-10T10:59:00Z
Modified
2025-04-20T04:00:36.432296Z
Downstream
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone image header. An attacker may be able to launch a 'Denial of Service attack' in the context of the user running the affected application.

References

Affected packages

Debian:11 / partclone

Package

Name
partclone
Purl
pkg:deb/debian/partclone?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.89-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / partclone

Package

Name
partclone
Purl
pkg:deb/debian/partclone?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.89-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / partclone

Package

Name
partclone
Purl
pkg:deb/debian/partclone?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.89-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/thomas-tsai/partclone

Affected ranges

Type
GIT
Repo
https://github.com/thomas-tsai/partclone
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

0.*

0.2.26-stable
0.2.3
0.2.47
0.2.48-stable
0.2.54
0.2.55
0.2.56
0.2.58
0.2.60
0.2.61
0.2.62
0.2.65
0.2.67
0.2.68
0.2.69
0.2.70
0.2.71
0.2.72
0.2.73
0.2.74
0.2.75
0.2.76
0.2.78
0.2.79
0.2.8
0.2.80
0.2.81
0.2.82
0.2.83
0.2.84
0.2.85
0.2.86
0.2.88
0.2.89

debian/0.*

debian/0.2.33
debian/0.2.34

Other

stable