exFAT: Multiple vulnerabilities

exFAT: Multiple vulnerabilities Two vulnerabilities have been found in exFAT allowing remote attackers to execute arbitrary code or cause Denial of Service. December 12, 2016 December 12, 2016: 1 563936 remote 1.2.1 1.2.1

A full-featured exFAT file system implementation for Unix-like systems.

Two vulnerabilities were found in exFAT. A malformed input can cause a write heap overflow or cause an endless loop.

Remote attackers could execute arbitrary code or cause Denial of Service.

There is no known workaround at this time.

All exFAT users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-fs/exfat-utils-1.2.1"

CVE-2015-8026 Heap overflow and endless loop in exfatfsck / exfat-utils BlueKnight b-man