PublicDateAtUSN: 2016-05-19
Candidate: CVE-2016-4804
PublicDate: 2016-06-03 14:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4804
 https://blog.fuzzing-project.org/44-dosfstools-fsck.vfat-Several-invalid-memory-accesses.html
 https://ubuntu.com/security/notices/USN-2986-1
Description:
 The read_boot function in boot.c in dosfstools before 4.0 allows attackers
 to cause a denial of service (crash) via a crafted filesystem, which
 triggers a heap-based buffer overflow in the (1) read_fat function or an
 out-of-bounds heap read in (2) get_fat function.
Ubuntu-Description:
Notes:
Bugs:
 https://github.com/dosfstools/dosfstools/issues/25
 https://github.com/dosfstools/dosfstools/issues/26
Priority: medium
Discovered-by: Hanno Böck
Assigned-to: mdeslaur
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [6.2 MEDIUM]

Patches_dosfstools:
 upstream: https://github.com/dosfstools/dosfstools/commit/e8eff147e9da1185f9afd5b25948153a3b97cf52
upstream_dosfstools: released (4.0-1)
precise_dosfstools: released (3.0.12-1ubuntu1.3)
precise/esm_dosfstools: released (3.0.12-1ubuntu1.3)
trusty_dosfstools: released (3.0.26-1ubuntu0.1)
trusty/esm_dosfstools: released (3.0.26-1ubuntu0.1)
vivid/stable-phone-overlay_dosfstools: pending (3.0.27-1ubuntu0.1)
vivid/ubuntu-core_dosfstools: released (3.0.27-1ubuntu0.1)
wily_dosfstools: released (3.0.28-1ubuntu0.1)
xenial_dosfstools: released (3.0.28-2ubuntu0.1)
esm-infra/xenial_dosfstools: released (3.0.28-2ubuntu0.1)
yakkety_dosfstools: not-affected (4.0-2ubuntu1)
zesty_dosfstools: not-affected (4.0-2ubuntu1)
devel_dosfstools: not-affected (4.0-2ubuntu1)