Oval Definition:
oval:org.opensuse.security:def:20158972
Revision Date
:
2022-06-30
Version
:
1
Title
:
CVE-2015-8972
Description
:
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2015-8972
Mitre CVE-2015-8972
SUSE CVE-2015-8972
openSUSE-SU-2016:2888-1
Platform(s)
:
openSUSE 13.2
openSUSE Leap 15.0
openSUSE Leap 15.3
openSUSE Leap 15.4
openSUSE Leap 42.1
openSUSE Leap 42.2
openSUSE Leap 42.3
openSUSE Tumbleweed
Product(s)
:
Definition Synopsis
openSUSE 13.2 is installed
AND
gnuchess-6.0.2-6.3.1 is installed
Definition Synopsis
openSUSE Leap 42.1 is installed
AND
Package Information
gnuchess-6.2.1-4.1 is installed
AND
gnuchess is signed with openSUSE key
Definition Synopsis
openSUSE Leap 42.2 is installed
AND
Package Information
gnuchess-6.2.1-5.1 is installed
AND
gnuchess is signed with openSUSE key
Definition Synopsis
openSUSE Leap 42.3 is installed
AND
Package Information
gnuchess-6.2.1-8 is installed
AND
gnuchess is signed with openSUSE key
Definition Synopsis
openSUSE Leap 15.0 is installed
AND
Package Information
gnuchess-6.2.5-lp150.2 is installed
AND
gnuchess is signed with openSUSE key
Definition Synopsis
openSUSE Tumbleweed is installed
AND
gnuchess-6.2.4-1.1 is installed
Definition Synopsis
openSUSE Leap 15.3 is installed
AND
Package Information
gnuchess-6.2.6-bp153.1.16 is installed
AND
gnuchess is signed with openSUSE key
Definition Synopsis
openSUSE Leap 15.4 is installed
AND
Package Information
gnuchess-6.2.9-bp154.1.21 is installed
AND
gnuchess is signed with openSUSE key
BACK