SB2018042906 - Multiple vulnerabilities in libopenmpt

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2018-10017)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in soundlib/Snd_fx.cpp due to out-of-bounds read. A remote attacker can supply a specially crafted IT or MO3 file with many nested pattern loops and cause the service to crash.

2) Out-of-bounds write (CVE-ID: CVE-2018-11710)

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists in soundlib/pattern.h due to an invalid write near address 0 in an out-of-memory situation. A remote attacker can supply a specially crafted AMS file with many nested pattern loops and cause the service to crash or execute arbitrary code with elevated privileges.

Remediation

Install update from vendor's website.

References

• https://lib.openmpt.org/libopenmpt/2018/04/08/security-updates-0.3.8-0.2-beta31-0.2.7561-beta20.5-p8...
• https://lib.openmpt.org/libopenmpt/2018/04/29/security-updates-0.3.9-0.2-beta32-0.2.7561-beta20.5-p9...