Heap-based buffer overflow in libotr - CVE-2012-3461

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU43692

Heap-based buffer overflow in libotr - CVE-2012-3461

Published: August 20, 2012 / Updated: August 11, 2020


Vulnerability identifier: #VU43692
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-3461
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which. A remote attacker can use a message with the value to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

libotr
Gentoo Linux
Fedora
SUSE Linux
libotr (Alpine package)
libotr

How to mitigate CVE-2012-3461

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libotr (Alpine package) - update to 3.2.1-r0
libotr - addressed in versions 3.2.0-2.el5, 3.2.0-5.el6, 3.2.1-1.el5, 3.2.1-1.el6

External References

Related Security Bulletins