PT-2017-10397 · Unknown+2 · Game-Music-Emu+2

Chris Evans · Published 2016-12-15 · Updated 2024-05-01 · CVE-2016-9959

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions game-music-emu versions prior to 0.6.1

Description The issue allows remote attackers to generate out of bounds 8-bit values.

Recommendations For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2018-3685

CVE-2016-9959

DLA-750-1

DSA-3735-1

MGASA-2016-0428

MGASA-2017-0046

OPENSUSE-SU-2017_0022-1

OPENSUSE-SU-2024:10944-1

SUSE-SU-2016:3250-1

Affected Products

Alt Linux

Suse

Game-Music-Emu

References · 54

• 🔥 https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html · Exploit
• https://osv.dev/vulnerability/CVE-2016-9959 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-3685 · Vendor Advisory
• https://security.gentoo.org/glsa/201707-02 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3735-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9961 · Security Note
• https://advisories.mageia.org/MGASA-2017-0046.html · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/game-music-emu · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9959 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9959 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:3250-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9957 · Security Note