Patch Ticker

DStarGateway integer underflow flaw

A calculation error in the DStarGateway program can be exploited by attackers!

Summary

An integer underflow in dstarCallsignToAPRS in APRSUtils.cpp occurs when the RS-MS1A sender field is empty. G4KLX DStarGateway and F4FXL DStarGateway before commit 7b75de6 are affected.

Affected when

  • RS-MS1A sender field is empty

What to do

Update to a build that includes commit 7b75de6 or later. No fixed version number is given.

Products and platforms

  • DStarGateway

CVE IDs

Sources

Times

First published

First seen