PT-2016-4019 · Matroska+1 · Libebml+1

Published 2016-01-29 · Updated 2017-01-20 · CVE-2015-8789

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libEBML versions prior to 1.3.3

Description A use-after-free issue exists in the EbmlMaster::Read function, allowing context-dependent attackers to have an unspecified impact. This can be achieved by providing a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.

Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the processing of deeply nested EBML elements to minimize the risk of exploitation.

Fix

Related Identifiers

ALT-PU-2016-1931

CVE-2015-8789

DSA-3538-1

Affected Products

Alt Linux

Libebml

References · 23

• https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8789 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8791 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8790 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3538-1 · Vendor Advisory
• http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3538-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1931 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/libebml · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8789 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-8789 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8789 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8789 · Security Note
• http://debian.org/security/2016/dsa-3538 · Vendor Advisory