[Bug 1037255] New: VUL-1: CVE-2017-8419: lame: denial of service (stack-based buffer overflow or heap-based buffer overflow) via a crafted file
http://bugzilla.opensuse.org/show_bug.cgi?id=1037255 Bug ID: 1037255 Summary: VUL-1: CVE-2017-8419: lame: denial of service (stack-based buffer overflow or heap-based buffer overflow) via a crafted file Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: mikhail.kasimov@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 723519 --> http://bugzilla.opensuse.org/attachment.cgi?id=723519&action=edit CVE-2017-8419_reproducer Ref: https://nvd.nist.gov/vuln/detail/CVE-2017-8419 ==================================================== Description LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels. ==================================================== Hyperlink [1] https://sourceforge.net/p/lame/bugs/458/ [2] Reproducer: https://sourceforge.net/p/lame/bugs/458/attachment/lame_stack_corruption_poc... (open-)SUSE: https://software.opensuse.org/package/lame 3.99.5 (TW, 42.{1,2}, hardware:sdr repo, multimedia:libs repo, and multimedia:musescore2 repo for TW only) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1037255 Mikhail Kasimov <mikhail.kasimov@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Alias| |CVE-2017-8419 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1037255 http://bugzilla.opensuse.org/show_bug.cgi?id=1037255#c1 Andreas Stieger <astieger@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|Leap 42.2 |unspecified URL| |https://smash.suse.de/issue | |/184690/ Component|Security |3rd party software CC| |crrodriguez@opensuse.org, | |davejplater@gmail.com, | |idonmez@suse.com, | |jjolly@suse.com, | |mseben@gmail.com, | |ohering@suse.com, | |pascal.bleser@opensuse.org, | |plinnell@opensuse.org, | |prusnak@opensuse.org, | |pth@suse.com, | |sbrabec@suse.com, | |seife@novell.slipkontur.de, | |sreeves@suse.com, | |tchvatal@suse.com, | |tiwai@suse.com, | |wstephenson@suse.com Assignee|security-team@suse.de |opensuse-communityscreening | |@forge.provo.novell.com QA Contact|qa-bugs@suse.de |opensuse-communityscreening | |@forge.provo.novell.com Product|openSUSE Distribution |openSUSE.org OS|Other |openSUSE 42.2 --- Comment #1 from Andreas Stieger <astieger@suse.com> --- Not a distribution package, moving. multimedia:libs/lame does not have an explicit maintainer set, cc'ing project maintainers. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com