Bug 964397 (CVE-2015-8791) - VUL-0: CVE-2015-8791: libebml: The EbmlElement::ReadCodedSizeValue function leaks information
Summary: VUL-0: CVE-2015-8791: libebml: The EbmlElement::ReadCodedSizeValue function l...
Status: RESOLVED DUPLICATE of bug 961031
Alias: CVE-2015-8791
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 42.1
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/161441/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-01 08:59 UTC by Johannes Segitz
Modified: 2016-07-22 22:54 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2016-02-01 08:59:44 UTC 
CVE-2015-8791

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows
context-dependent attackers to obtain sensitive information from process heap
memory via a crafted length value in an EBML id, which triggers an invalid
memory access.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8791
https://github.com/Matroska-Org/libebml/commit/24e5cd7c666b1ddd85619d60486db0a5481c1b90
Comment 1 Stefan Seyfried 2016-02-01 09:14:24 UTC 
I have stepped down from maintaining libebml, libmatroska and mkvtoolnix in 2009:
http://lists.opensuse.org/opensuse-packaging/2009-08/msg00172.html

I know nothing about those packages, the only thing I can do is drop them and replace them with an empty package to make sure the vulnerability is solved by uninstalling them.
Comment 2 Swamp Workflow Management 2016-02-01 23:00:35 UTC 
bugbot adjusting priority
Comment 3 Ferdinand Thiessen 2016-07-22 22:54:00 UTC 
Duplicate of: https://bugzilla.opensuse.org/show_bug.cgi?id=961031
Fixed with Request: https://build.opensuse.org/request/show/352647
Maintenance incident 4501: https://build.opensuse.org/project/show/openSUSE:Maintenance:4501

*** This bug has been marked as a duplicate of bug 961031 ***