PT-2017-3185 · Bchunk+1 · Bchunk+1
Wen Bin
·
Publicado
2017-09-09
·
Atualizado
2024-08-19
·
CVE-2017-15953
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
bchunk versions 1.2.0 through 1.2.1
Description
The issue is related to a heap-based buffer overflow that can cause a crash when processing a malformed CUE (.cue) file. This can be exploited by a remote attacker using a specially crafted file to cause the application to terminate abnormally.
Recommendations
For versions 1.2.0 and 1.2.1, consider avoiding the use of bchunk to process untrusted CUE files until a fix is available.
As a temporary workaround, restrict the use of bchunk to trusted input files to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Bchunk