PT-2017-19205 · Libmtp+1 · Libmtp+1

Published 2017-04-09 · Updated 2020-04-05 · CVE-2017-9831

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libmtp versions 1.1.12 and below

Description The issue is related to an integer overflow in the ptp unpack EOS CustomFuncEx function, located in the ptp-pack.c file. This allows attackers to potentially cause a denial of service due to out-of-bounds memory access or possibly achieve remote code execution. The attack vector involves inserting a mobile device into a personal computer via a USB cable.

Recommendations For libmtp versions 1.1.12 and below, consider updating to a version above 1.1.12 to resolve the issue. As a temporary workaround, restrict the use of the ptp unpack EOS CustomFuncEx function until a patch is available.

Fix

RCE

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2017-1445

CVE-2017-9831

DLA-1029-1

DLA-2169-1

MGASA-2017-0225

Affected Products

Alt Linux

Libmtp

References · 15

• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9831 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/LTQ4RARXHHXXKCHPXONGT7HSMAQXNAVM · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9831 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0225.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0225 · Vendor Advisory
• https://sourceforge.net/p/libmtp/mailman/message/35735992 · Patch
• https://osv.dev/vulnerability/DLA-2169-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9831 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9831 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9831 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9831 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-9831 · Security Note
• https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html · Note
• https://sourceforge.net/p/libmtp/code/ci/aa7d91a789873a9d86969028e57f888a1241c085 · Note
• https://bugs.mageia.org/show_bug.cgi?id=21177 · Note