PT-2017-4080 · Taglib · Taglib

Sbooth · Published 2017-08-08 · Updated 2024-06-15 · CVE-2017-12678

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TagLib version 1.11.1

Description The issue is related to the rebuildAggregateFrames function in the TagLib library, which is used for reading and modifying metadata in audio files. This function has a vulnerability that allows for unlimited loading of dangerous file types. Exploitation of this issue can enable a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability can be triggered via a crafted audio file.

Recommendations For TagLib version 1.11.1, consider disabling the rebuildAggregateFrames function as a temporary workaround until a patch is available. Restrict access to the id3v2framefactory.cpp module to minimize the risk of exploitation. Avoid using crafted audio files that could trigger the vulnerability until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

AZL-7379

BDU:2021-01434

CVE-2017-12678

DLA-2772-1

MGASA-2017-0286

OPENSUSE-SU-2024:11421-1

Affected Products

Taglib

References · 28

• https://github.com/taglib/taglib/issues/829 · Vendor Advisory
• https://github.com/taglib/taglib/pull/831 · Vendor Advisory
• https://github.com/taglib/taglib/commit/cb9f07d9dcd791b63e622da43f7b232adaec0a9a · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12678 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12678 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-12678 · Security Note
• https://advisories.mageia.org/MGASA-2017-0286.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12678 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-12678 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2017-12678 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7379 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11421-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2772-1 · Vendor Advisory