Potential Integer Overflow vulnerability in Zoe/zoelsochore.c

snap
1

Hi,
It seems that there exists a potential buffer overflow, according to the following code:

(Zoe/zoeHMM.c:495)
char * ZOE = getenv(“ZOE”);

(Zoe/zoeHMM.c:500)
sprintf(path, “%s/HMM/%s”, ZOE, file);

2

Hi, I think I’m a bit confused, are you referring to a particular snap?

3

Yes, I am referring to snap 2013-11-29

4

That doesn’t look like a valid snap name. Can you attach the output of snap list ?

5

Currently I am using snap 2.49.2 from ubuntu20.04

6

I think that refers to the unrelated SNAP program @ https://github.com/KorfLab/SNAP.

@ksb21st I think you’re wrong here. You better file a bug at the aforementioned GitHub address.

7

I think you are right. Sorry for the commotion. Thank you!

3 Likes
8