Posted by Ron E on Sep 03Description: A stack-based buffer overflow exists in the Linux Industrial I/O (IIO) userspace utility lsiio. The vulnerability occurs in the find_type_by_name() function, where the program reads an unbounded string from a filesystem-backed attribute into a fixed-size stack buffer using fscanf("%s", ...). If a crafted or oversized attribute value is present, the unbounded read causes a write beyond the bounds of the destination stack...