field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite loop.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service
    (CPU consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '\0', which triggers an infinite
    loop. (CVE-2008-2109)

This update for libid3tag fixes the following issues :

  - CVE-2004-2779 CVE-2017-11551: Fixed     id3_utf16_deserialize() in utf16.c, which previously     misparsed ID3v2 tags encoded in UTF-16 with an odd     number of bytes, triggering an endless loop allocating     memory until OOM leading to DoS. (bsc#1081959     bsc#1081961)

  - CVE-2017-11550 CVE-2008-2109: Fixed the handling of     unknown encodings when parsing ID3 tags. (bsc#1081962     bsc#387731)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libid3tag fixes the following issues :

  - CVE-2004-2779 CVE-2017-11551: Fixed     id3_utf16_deserialize() in utf16.c, which previously     misparsed ID3v2 tags encoded in UTF-16 with an odd     number of bytes, triggering an endless loop allocating     memory until OOM leading to DoS. (bsc#1081959     bsc#1081961)

  - CVE-2017-11550 CVE-2008-2109: Fixed the handling of     unknown encodings when parsing ID3 tags. (bsc#1081962     bsc#387731)

This update was imported from the SUSE:SLE-12:Update update project.

field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an ID3_FIELD_TYPE_STRINGLIST field that ends in '&#0;', which triggers an infinite loop.

The updated packages have been patched to correct this.

The remote host is affected by the vulnerability described in GLSA-200805-15 (libid3tag: Denial of Service)

    Kentaro Oda reported an infinite loop in the file field.c when parsing     an MP3 file with an ID3_FIELD_TYPE_STRINGLIST field that ends in '\\0'.
  Impact :

    A remote attacker could entice a user to open a specially crafted MP3     file, possibly resulting in a Denial of Service.
  Workaround :

    There is no known workaround at this time.

- Fri May 9 2008 Todd Zullinger <tmz at pobox.com> -     0.15.1b-5

    - fix for CVE-2008-2109 (#445812)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Bug #445812 - CVE-2008-2109 libid3tag: infinite loop in     ID3_FIELD_TYPE_STRINGLIST parsing

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri May 9 2008 Todd Zullinger <tmz at pobox.com> -     0.15.1b-6

    - fix for CVE-2008-2109 (#445812)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
401025	Alpine: multiple libid3tag packages: security update to 0.15.1-r5 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
401025	Alpine: multiple libid3tag packages: security update to 0.15.1-r5 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
108452	SUSE SLED12 Security Update : libid3tag (SUSE-SU-2018:0722-1)	Nessus	SuSE Local Security Checks	high
108441	openSUSE Security Update : libid3tag (openSUSE-2018-277)	Nessus	SuSE Local Security Checks	high
37269	Mandriva Linux Security Advisory : libid3tag (MDVSA-2008:103)	Nessus	Mandriva Local Security Checks	medium
32352	GLSA-200805-15 : libid3tag: Denial of Service	Nessus	Gentoo Local Security Checks	medium
32348	Fedora 8 : libid3tag-0.15.1b-5.fc8 (2008-3976)	Nessus	Fedora Local Security Checks	medium
32336	Fedora 7 : libid3tag-0.15.1b-5.fc7 (2008-3874)	Nessus	Fedora Local Security Checks	medium
32332	Fedora 9 : libid3tag-0.15.1b-6.fc9 (2008-3757)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-2109

high

Tenable Plugins

high

high

high

high

medium

medium

medium

medium

medium