Vulnerability CVE-2017-15954: Information
Description
bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file.
Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| bchunk | sisyphus | 1.2.2-alt1 | 1.2.2-alt1 | ALT-PU-2020-3148-1 | 260564 | Fixed |
| bchunk | p10 | 1.2.2-alt1 | 1.2.2-alt1 | ALT-PU-2020-3148-1 | 260564 | Fixed |
| bchunk | p9 | 1.2.2-alt1 | 1.2.2-alt1 | ALT-PU-2020-3175-1 | 260565 | Fixed |
| bchunk | c10f1 | 1.2.2-alt1 | 1.2.2-alt1 | ALT-PU-2020-3148-1 | 260564 | Fixed |
| bchunk | p11 | 1.2.2-alt1 | 1.2.2-alt1 | ALT-PU-2020-3148-1 | 260564 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://github.com/extramaster/bchunk/issues/3 |
|
| DSA-4026 |
|
| https://github.com/hessu/bchunk/issues/1 | |
| [debian-lts-announce] 20171102 [SECURITY] [DLA 1158-1] bchunk security update |