MNBSD-2021-9: Stack buffer overflow in the ggatec(8) GEOM Gate client

Description

The ggatec(8) GEOM Gate client daemon did not validate the size of a response before writing it to a fixed-size buffer. A malicious server could send crafted responses to overflow the stack of ggatec(8) and potentially execute arbitrary code.

Affected Versions

ggatec

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-21:14.ggatec.asc
• https://www.cve.org/CVERecord?id=CVE-2021-29630

Additional Information

Aliases: CVE-2021-29630

Published: August 24, 2021
Last Modified: August 24, 2021