CVE-2010-3846

Published: Nov 5, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

Affected (1)

Products: Nongnu: Cvs

Nongnu

1 product

Cvs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nongnu Cvs	Version 1.11.23

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050212.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050287.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050090.html

Source: secalert@redhat.com

http://secunia.com/advisories/41079

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42041

Source: secalert@redhat.com

http://secunia.com/advisories/42409

Source: secalert@redhat.com

http://www.osvdb.org/68952

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0918.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/44528

Source: secalert@redhat.com

http://www.securitytracker.com/id?1024795

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2845

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/2846

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2869

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/2899

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3080

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=642146

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/62858

Source: secalert@redhat.com

http://cvs.savannah.gnu.org/viewvc/cvs/ccvs/src/rcs.c?r1=1.262.4.65&r2=1.262.4.66&sortby=rev