Bug 559170 – <media-sound/vorbis-tools-1.4.0-r3: buffer overflow in aiff_open()

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2015-08-30 14:12:35 UTC]

From ${URL} :

Name : vorbis-tool
Affected Version: <= Revision 19495
URL : https://wiki.xiph.org/Vorbis-tools

Description :
An issue was found in oggenc/audio.c when it tries to open invalid AIFF file.

274    if(fread(buffer,1,len,in) < len)
The input buffer and length can be controlled by user indirectly via:

260    if(!find_aiff_chunk(in, "COMM", &len))

More info can be found at :
https://trac.xiph.org/ticket/2212



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Christopher Díaz Riveros (RETIRED) 2017-07-17 16:21:45 UTC]

ebuild submitted.

needs to be tested

[Comment 2 Christopher Díaz Riveros (RETIRED) 2017-07-21 13:14:39 UTC]

Stable on all arches, cleanup needed and glsa vote

[Comment 3 Sergei Trofimovich (RETIRED) 2017-08-09 22:00:02 UTC]

ia64 stable

[Comment 4 Agostino Sarubbo 2017-08-10 07:01:22 UTC]

amd64 stable

[Comment 5 Markus Meier 2017-08-10 19:55:54 UTC]

arm stable

[Comment 6 Thomas Deutschmann (RETIRED) 2017-08-18 20:12:04 UTC]

x86 stable

[Comment 7 Yury German 2017-08-30 01:30:05 UTC]

Arches - PPC / PPC64 / Alpha / hppa needs to be completed.

[Comment 8 Matt Turner 2017-08-31 15:21:22 UTC]

alpha stable

[Comment 9 Aaron Bauman (RETIRED) 2017-09-10 22:17:07 UTC]

sparc was dropped to exp.

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b5901d8f716555a1479f12313a2925fcadd177a9

[Comment 10 Sergei Trofimovich (RETIRED) 2017-09-20 21:04:18 UTC]

hppa stable

[Comment 11 Sergei Trofimovich (RETIRED) 2017-09-26 08:56:46 UTC]

ppc/ppc64 stable

[Comment 12 Yury German 2017-10-02 06:34:31 UTC]

New GLSA Request filed.

[Comment 13 Yury German 2017-10-02 06:36:43 UTC]

Maintainer(s), please drop the vulnerable version(s).

[Comment 14 Aaron Bauman (RETIRED) 2017-10-08 21:32:51 UTC]

Downgraded to B3. No PoC for ACE/RCE.

GLSA Vote: No

Maintainers, please clean the vulnerable.

[Comment 15 Aaron Bauman (RETIRED) 2017-11-11 20:07:29 UTC]

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d78d252fcdbf8d91583548af6a821fe561ee0947

[Comment 16 Sergei Trofimovich (RETIRED) 2017-12-10 21:35:28 UTC]

sparc stable (thanks to Rolf Eike Beer)