Buffer overflow in libebml - CVE-2015-8792
Published: January 29, 2016 / Updated: July 28, 2020
Vulnerability identifier: #VU32311
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-8792
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.
Affected software
libebml
libmatroska (Alpine package)
libmatroska (Alpine package)
How to mitigate CVE-2015-8792
Install update from vendor's website.
libebml - update to 1.4.4
libmatroska (Alpine package) - addressed in versions 1.4.2-r0, 1.4.4-r0
libmatroska (Alpine package) - addressed in versions 1.4.2-r0, 1.4.4-r0
External References
- http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
- http://www.debian.org/security/2016/dsa-3526
- https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog
- https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f