Bug 830356 (CVE-2013-0899) - VUL-0: CVE-2013-0899: opus: Integer overflow in the padding implementation in the opus_packet_parse_impl
Summary: VUL-0: CVE-2013-0899: opus: Integer overflow in the padding implementation in...
Status: RESOLVED INVALID
Alias: CVE-2013-0899
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Stanislav Brabec
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-07-19 15:22 UTC by Marcus Meissner
Modified: 2013-07-25 09:03 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2013-07-19 15:22:48 UTC 
Via Chrome update, this is for the "opus" seperate package.

CVE-2013-0899

Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.


    CONFIRM:http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
    CONFIRM:http://opus-codec.org/downloads/
    CONFIRM:https://code.google.com/p/chromium/issues/detail?id=160480
    CONFIRM:https://codereview.chromium.org/11575026

    CONFIRM:https://src.chromium.org/viewvc/chrome/trunk/deps/third_party/opus/src/opus_decoder.c?r1=173498&r2=173497&pathrev=173498

    CONFIRM:https://src.chromium.org/viewvc/chrome?view=rev&revision=173498
Comment 1 Stanislav Brabec 2013-07-19 17:30:12 UTC 
We have opus package in openSUSE 12.3. It is a version opus-1.0.1, and the patch is already included there.

So there is nothing to do.

If I remember well, ekiga used/uses opus for a long time. But I don't see any older instances of the opus package.
Comment 2 Swamp Workflow Management 2013-07-19 22:00:30 UTC 
bugbot adjusting priority
Comment 3 Sebastian Krahmer 2013-07-22 06:13:32 UTC 
OK, closing
Comment 4 Stanislav Brabec 2013-07-23 17:25:47 UTC 
Regarding opus and ekiga: opus support is a part of gstreamer-0_10-plugins-bad. But in 12.2 it was not enabled in SUSE builds.

gstreamer-0_10-plugins-bad.spec:
# FIXME: missing BuildRequires on opus (http://opus-codec.org/)