Out-of-bounds read in libopenmpt - CVE-2018-10017
Published: August 6, 2018 / Updated: August 7, 2018
Vulnerability identifier: #VU14209
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10017
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists in soundlib/Snd_fx.cpp due to out-of-bounds read. A remote attacker can supply a specially crafted IT or MO3 file with many nested pattern loops and cause the service to crash.
Affected software
libopenmpt
Opensuse
Ubuntu
libopenmpt0 (Ubuntu package)
openmpt123 (Ubuntu package)
Opensuse
Ubuntu
libopenmpt0 (Ubuntu package)
openmpt123 (Ubuntu package)
How to mitigate CVE-2018-10017
Update to version 0.3.8.
libopenmpt - update to 0.3.8
libopenmpt0 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
openmpt123 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
libopenmpt0 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
openmpt123 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1