SB2019090808 - Multiple vulnerabilities in libmysofa

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2019-16091)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Symonics libmysofa 0.7 has an out-of-bounds read in directblockRead in hdf/fractalhead.c.

2) NULL pointer dereference (CVE-ID: CVE-2019-16092)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in getHrtf in hrtf/reader.c. A remote attacker can perform a denial of service (DoS) attack.

3) Out-of-bounds write (CVE-ID: CVE-2019-16093)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Symonics libmysofa 0.7 has an invalid write in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

4) Out-of-bounds read (CVE-ID: CVE-2019-16094)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Symonics libmysofa 0.7 has an invalid read in readOHDRHeaderMessageDataLayout in hdf/dataobject.c.

5) Out-of-bounds read (CVE-ID: CVE-2019-16095)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c.

Remediation

Install update from vendor's website.

References

• https://github.com/hoene/libmysofa/compare/f571522...e07edb3