CVE:CVE-2014-9765
CNNVD:CNNVD-201602-343
xdelta是软件开发者Joshua MacDonald开发的一套用于处理增量编码（非完整存储或传输数据）的命令行程序。xdelta3是xdelta的一个增强版。
xdelta3 3.0.9之前版本的xdelta3-main.h文件中的‘main_get_appheader’函数存在缓冲区溢出漏洞。远程攻击者可借助特制的输入文件利用该漏洞执行任意代码。
solution:Upgrade canonical ubuntu_linux to a higher version than 14.04,15.10,and avoid the version 14.04,15.10; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade xdelta xdelta3 to a higher version than 3.0.8,and avoid the version (,3.0.8]; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2