CVE-2014-9862
Fixed in a distro release EPSS 7%
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
Products: apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | bsdiff | 4.3-17 |
| Debian 13 | bsdiff | 4.3-17 |
| Debian 14 | bsdiff | 4.3-17 |
| Debian 7 | bsdiff | 4.3-14+deb7u1 |
| Debian 8 | bsdiff | 4.3-15+deb8u1 |
| SUSE Enterprise Storage 6 | libostree | 2018.9-150100.7.4.1 |
| SUSE Enterprise Storage 7 | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | libostree | 2018.9-150100.7.4.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | libostree | 2018.9-150100.7.4.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | libostree | 2018.1-150000.4.3.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | libostree | 2018.1-150000.4.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | libostree | 2021.6-150400.3.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | libostree | 2021.6-150400.3.3.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | libostree | 2018.9-150100.7.4.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | libostree | 2018.9-150100.7.4.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | libostree | 2020.8-150200.3.6.1 |
| SUSE Linux Enterprise Server 15-LTSS | libostree | 2018.1-150000.4.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | libostree | 2018.1-150000.4.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | libostree | 2018.9-150100.7.4.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | libostree | 2020.8-150200.3.6.1 |
| SUSE Manager Proxy 4.1 | libostree | 2020.8-150200.3.6.1 |
| SUSE Manager Retail Branch Server 4.1 | libostree | 2020.8-150200.3.6.1 |
| SUSE Manager Server 4.1 | libostree | 2020.8-150200.3.6.1 |
| Ubuntu 16.04 LTS | bsdiff | 4.3-15+deb8u1build0.16.04.1 |
| openSUSE Leap 15.3 | libostree | 2020.8-150200.3.6.1 |
| openSUSE Leap 15.4 | libostree | 2021.6-150400.3.3.1 |
| openSUSE Tumbleweed | bsdiff | 4.3-5.3 |