Information disclosure in libebml - CVE-2015-8790
Published: January 29, 2016 / Updated: July 28, 2020
Vulnerability identifier: #VU32313
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-8790
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.
Affected software
libebml
libebml (Alpine package)
libebml
Fedora
IBM Tivoli Storage Manager
libebml (Alpine package)
libebml
Fedora
IBM Tivoli Storage Manager
How to mitigate CVE-2015-8790
Install update from vendor's website.
libebml - update to 1.3.3
libebml (Alpine package) - update to 1.3.3-r0
libebml - addressed in versions 1.2.2-1.el6, 1.3.3-3.el7
IBM Tivoli Storage Manager - update to 5.3.6.6
libebml (Alpine package) - update to 1.3.3-r0
libebml - addressed in versions 1.2.2-1.el6, 1.3.3-3.el7
IBM Tivoli Storage Manager - update to 5.3.6.6
External References
- http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
- http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
- http://www.debian.org/security/2016/dsa-3538
- http://www.securityfocus.com/bid/85307
- http://www.securityfocus.com/bid/95124
- http://www.talosintelligence.com/reports/TALOS-2016-0036/
- https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
- https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b