bchunk denial of service vulnerability

bchunk is a format converter capable of converting CD images in bin/cue format to iso format files. A security vulnerability exists in bchunk version 1.2.0 and 1.2.1. An attacker can exploit this vulnerability to cause a denial of service crash with malformed CUE .cue files...

Debian DLA-1158-1 : bchunk security update

Several vulnerabilities were discovered in bchunk, a tool to convert a CD image in .bin/.cue format into a set of .iso and .cdr/.wav tracks. It was possible to trigger a heap-based buffer overflow with an resultant invalid free when processing a malformed CUE .cue file that may lead to the...

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

Input validation

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

Heap overflow

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

Heap overflow

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

UBUNTU-CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

DEBIAN-CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

DEBIAN-CVE-2017-15953

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE .cue file...

UBUNTU-CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

UBUNTU-CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

DEBIAN-CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-15955

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE .cue file...

CVE-2017-15954

CVE-2017-15954 affects the bchunk package (BinChunker) versions 1.2.0 and 1.2.1. The vulnerability is a heap-based buffer overflow that can cause a crash (and an invalid free) when processing a malformed CUE (.cue) file. Descriptions across multiple sources confirm the issue and its association w...

CVE-2017-15955

CVE-2017-15955 affects bchunk (BinChunker) 1.2.0/1.2.1. The issue causes a crash/denial of service when processing malformed CUE (.cue) files, described as an Access violation near NULL on destination operand. Several connected advisories confirm the vulnerability and provide affected versions an...