Bug 964395 (CVE-2015-8789) - VUL-0: CVE-2015-8789: libebml: Use-after-free vulnerability in the EbmlMaster::Read function
Summary: VUL-0: CVE-2015-8789: libebml: Use-after-free vulnerability in the EbmlMaster...
Status: RESOLVED DUPLICATE of bug 961031
Alias: CVE-2015-8789
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 42.1
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/161439/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-01 08:58 UTC by Johannes Segitz
Modified: 2018-02-26 15:18 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2016-02-01 08:58:48 UTC 
CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before
1.3.3 allows context-dependent attackers to have unspecified impact via a
"deeply nested element with infinite size" followed by another element of an
upper level in an EBML document.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8789
https://github.com/Matroska-Org/libebml/commit/88409e2a94dd3b40ff81d08bf6d92f486d036b24
https://github.com/Matroska-Org/libebml/blob/release-1.3.3/ChangeLog
http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
Comment 1 Swamp Workflow Management 2016-02-01 23:00:17 UTC 
bugbot adjusting priority
Comment 2 Stefan Seyfried 2016-02-14 18:46:46 UTC 
I have stepped down from maintaining libebml, libmatroska and mkvtoolnix in 2009:
http://lists.opensuse.org/opensuse-packaging/2009-08/msg00172.html

I know nothing about those packages, the only thing I can do is drop them and replace them with an empty package to make sure the vulnerability is solved by uninstalling them.
Comment 3 Ferdinand Thiessen 2016-07-22 22:30:27 UTC 
Duplicate of: https://bugzilla.opensuse.org/show_bug.cgi?id=961031
Fixed with Request: https://build.opensuse.org/request/show/352647
Maintenance incident 4501: https://build.opensuse.org/project/show/openSUSE:Maintenance:4501

*** This bug has been marked as a duplicate of bug 961031 ***
Comment 4 Marcus Meissner 2018-02-26 15:18:07 UTC 
CVE-2016-1515 was a dup of this CVE.