Bug 964396 (CVE-2015-8790) - VUL-0: CVE-2015-8790: libebml: The EbmlUnicodeString::UpdateFromUTF8 function leaks information
Summary: VUL-0: CVE-2015-8790: libebml: The EbmlUnicodeString::UpdateFromUTF8 function...
Status: RESOLVED DUPLICATE of bug 961031
Alias: CVE-2015-8790
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 42.1
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/161440/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-01 08:59 UTC by Johannes Segitz
Modified: 2018-02-26 15:17 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2016-02-01 08:59:19 UTC 
CVE-2015-8790

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows
context-dependent attackers to obtain sensitive information from process heap
memory via a crafted UTF-8 string, which triggers an invalid memory access.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8790
https://github.com/Matroska-Org/libebml/commit/ababb64e0c792ad2a314245233db0833ba12036b
Comment 1 Swamp Workflow Management 2016-02-01 23:00:26 UTC 
bugbot adjusting priority
Comment 2 Stefan Seyfried 2016-02-14 18:45:36 UTC 
I have stepped down from maintaining libebml, libmatroska and mkvtoolnix in 2009:
http://lists.opensuse.org/opensuse-packaging/2009-08/msg00172.html

I know nothing about those packages, the only thing I can do is drop them and replace them with an empty package to make sure the vulnerability is solved by uninstalling them.
Comment 3 Ferdinand Thiessen 2016-07-22 22:34:27 UTC 
CVE-2015-8790 is also known as TALOS-CAN-0036 and was already fixed by Request: https://build.opensuse.org/request/show/352647

So this is a duplicate of: https://bugzilla.opensuse.org/show_bug.cgi?id=961031
Maintenance incident 4501: https://build.opensuse.org/project/show/openSUSE:Maintenance:4501

*** This bug has been marked as a duplicate of bug 961031 ***
Comment 4 Marcus Meissner 2018-02-26 15:17:16 UTC 
CVE-2016-1514 was a duplicate assigned to this CVE id.