Lucene search

DebianDEBIAN:DLA-1432-1:22EB6

HistoryJul 19, 2018 - 7:49 a.m.

[SECURITY] [DLA 1432-1] gpac security update

2018-07-1907:49:31

lists.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

Package : gpac
Version : 0.5.0+svn5324~dfsg1-1+deb8u1
CVE ID : CVE-2018-13005 CVE-2018-13006
Debian Bug : 902782

Two heap buffer over read conditions were found in gpac.

CVE-2018-13005

Due to an error in a while loop condition, the function urn_Read in
isomedia/box_code_base.c has a heap-based buffer over-read.

CVE-2018-13006

Due to an error in a strlen call, there is a heap-based buffer over-read
in the isomedia/box_dump.c function hdlr_dump.

For Debian 8 "Jessie", these problems have been fixed in version
0.5.0+svn5324~dfsg1-1+deb8u1.

We recommend that you upgrade your gpac packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9i386libgpac-dev< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_i386.deb
Debian9mipslibgpac4-dbgsym< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac4-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_mips.deb
Debian9mipsellibgpac-dev< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_mipsel.deb
Debian9armellibgpac4< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac4_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_armel.deb
Debian8allgpac< 0.5.0+svn5324~dfsg1-1+deb8u1gpac_0.5.0+svn5324~dfsg1-1+deb8u1_all.deb
Debian9s390xgpac-dbgsym< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1gpac-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_s390x.deb
Debian9s390xgpac-modules-base< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1gpac-modules-base_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_s390x.deb
Debian9amd64libgpac4< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac4_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_amd64.deb
Debian9armellibgpac-dev< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_armel.deb
Debian9i386libgpac4-dbgsym< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1libgpac4-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	i386	libgpac-dev	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_i386.deb
Debian	9	mips	libgpac4-dbgsym	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac4-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_mips.deb
Debian	9	mipsel	libgpac-dev	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_mipsel.deb
Debian	9	armel	libgpac4	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac4_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_armel.deb
Debian	8	all	gpac	< 0.5.0+svn5324~dfsg1-1+deb8u1	gpac_0.5.0+svn5324~dfsg1-1+deb8u1_all.deb
Debian	9	s390x	gpac-dbgsym	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	gpac-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_s390x.deb
Debian	9	s390x	gpac-modules-base	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	gpac-modules-base_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_s390x.deb
Debian	9	amd64	libgpac4	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac4_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_amd64.deb
Debian	9	armel	libgpac-dev	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac-dev_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_armel.deb
Debian	9	i386	libgpac4-dbgsym	< 0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1	libgpac4-dbgsym_0.5.2-426-gc5ad4e4+dfsg5-3+deb9u1_i386.deb