Posted by Ron E on Sep 03 Description:

A stack-based buffer overflow exists in the Linux Industrial I/O (IIO)

userspace utility lsiio. The vulnerability occurs in the

find_type_by_name() function, where the program reads an unbounded string

from a filesystem-backed attribute into a fixed-size stack buffer using

fscanf("%s", ...).

If a crafted or oversized attribute value is present, the unbounded read

causes a write beyond the bounds of the destination stack...