OpenBSD Information for VU#192995

Integer overflow in xdr_array() function when deserializing the XDR stream

Status

Affected

Vendor Statement

Please see http://www.openbsd.org/errata.html#xdr

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

Common patches available here ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/012_xdr.patch

If you have feedback, comments, or additional information about this vulnerability, please send us email.