Out-of-bounds write in libopenmpt - CVE-2018-11710
Published: August 7, 2018
Vulnerability identifier: #VU14210
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-11710
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.
The vulnerability exists in soundlib/pattern.h due to an invalid write near address 0 in an out-of-memory situation. A remote attacker can supply a specially crafted AMS file with many nested pattern loops and cause the service to crash or execute arbitrary code with elevated privileges.
Affected software
libopenmpt
Opensuse
Ubuntu
libopenmpt0 (Ubuntu package)
openmpt123 (Ubuntu package)
Opensuse
Ubuntu
libopenmpt0 (Ubuntu package)
openmpt123 (Ubuntu package)
How to mitigate CVE-2018-11710
Update to version 0.3.9.
libopenmpt - update to 0.3.9
libopenmpt0 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
openmpt123 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
libopenmpt0 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1
openmpt123 (Ubuntu package) - update to 0.3.6-1ubuntu0.1~esm1