ALT-PU-2016-1931-1
Closed vulnerabilities
Published: 2016-01-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-8789
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.
Severity: CRITICAL (9.6)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References:
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- openSUSE-SU-2016:0125
- openSUSE-SU-2016:0125
- DSA-3538
- DSA-3538
- 94924
- 94924
- http://www.talosintelligence.com/reports/TALOS-2016-0037/
- http://www.talosintelligence.com/reports/TALOS-2016-0037/
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24
- https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24
Published: 2016-01-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-8790
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
Severity: MEDIUM (4.3)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
References:
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- openSUSE-SU-2016:0125
- openSUSE-SU-2016:0125
- DSA-3538
- DSA-3538
- 85307
- 85307
- 95124
- 95124
- http://www.talosintelligence.com/reports/TALOS-2016-0036/
- http://www.talosintelligence.com/reports/TALOS-2016-0036/
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b
- https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b
Published: 2016-01-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-8791
The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.
Severity: MEDIUM (4.3)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
References:
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- [matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes
- openSUSE-SU-2016:0125
- openSUSE-SU-2016:0125
- DSA-3538
- DSA-3538
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90
- https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90