GHSA-2j6v-xpf3-xvrv
Use of Externally-Controlled Format String in wire-avs
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.wire:avs | < 7.1.12 | 7.1.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
A remote format string vulnerability allowed an attacker to cause a denial of service or possibly execute arbitrary code.
### Patches
* The issue has been fixed in wire-avs 7.1.12 and is already included on all Wire products (currently used version is 8.0.x)
### Workarounds
* No workaround known
### References
* Fixed in commit https://github.com/wireapp/wire-avs/commit/40d373ede795443ae6f2f756e9fb1f4f4ae90bbe
### For more information
If you have any questions or comments about this advisory feel free to email us at [[email protected]](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.