Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote
    attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
    (CVE-2014-2892)

The remote host is affected by the vulnerability described in GLSA-201612-29 (libmms: Remote execution of arbitrary code)

    A heap-based buffer overflow was discovered in the get_answer function       within mmsh.c of libmms.
  Impact :

    A remote attacker might send a specially crafted MMS over HTTP (MMSH)       response, possibly resulting in the remote execution of arbitrary code       with the privileges of the process.
  Workaround :

    There is no known workaround at this time.

This libmss update fixes the following security issue.

  - bnc#874723: Fixed a possible heap memory overrun     (CVE-2014-2892).

Alex Chapman discovered that a buffer overflow in processing 'MMS over HTTP' messages could result in the execution of arbitrary code.

ID	Name	Product	Family	Severity
401215	Alpine: multiple libmms packages: security update to 0.6.2-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
401215	Alpine: multiple libmms packages: security update to 0.6.2-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
95697	GLSA-201612-29 : libmms: Remote execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
75337	openSUSE Security Update : libmms (openSUSE-SU-2014:0590-1)	Nessus	SuSE Local Security Checks	high
73744	Debian DSA-2916-1 : libmms - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-2892

critical

Tenable Plugins

critical

critical

high

high

high