Main Vulnerability Database SB2017110907

SB2017110907 - Debian update for bchunk

Published: November 9, 2017

Security Bulletin ID SB2017110907

Severity

Low

Patch available

YES

Number of vulnerabilities 3

Exploitation vector Remote access

Highest impact Denial of service

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2017-15953)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer overflow when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

2) Heap-based buffer overflow (CVE-ID: CVE-2017-15954)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer overflow when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

3) NULL pointer dereference (CVE-ID: CVE-2017-15955)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

Install update from vendor's website.