Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.

The remote host is affected by the vulnerability described in GLSA-201701-10 (libotr, Pidgin OTR: Remote execution of arbitrary code)

    Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please       review the CVE identifiers for more information.
  Impact :

    A remote attacker could send a specially crafted message, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for libotr fixes the following issue :

  - Apply 'libotr-CVE-2016-2851.patch' to fix integer     overflows that used to occur on 64-bit architectures     when receiving 4GB messages. This flaw could potentially     have been exploited by an attacker to remotely execute     arbitrary code on the user's machine

  - (CVE-2016-2851, bsc#969785)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libotr fixes the following issues :

  - Apply 'libotr-CVE-2016-2851.patch' to fix integer     overflows that used to occur on 64-bit architectures     when receiving 4GB messages. This flaw could potentially     have been exploited by an attacker to remotely execute     arbitrary code on the user's machine. (CVE-2016-2851,     bsc#969785)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libotr and libotr2 were updated to fix one security issue :

  - CVE-2016-2851: Integer overflow vulnerability allowed     remote attackers to execute arbitrary code on 64 bit     platforms (boo#969785)

Markus Vervier discovered that OTR incorrectly handled large incoming messages. A remote attacker could use this issue to cause OTR to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

X41 D-Sec reports :

A remote attacker may crash or execute arbitrary code in libotr by sending large OTR messages.

Markus Vervier of X41 D-Sec GmbH discovered an integer overflow vulnerability in libotr, an off-the-record (OTR) messaging library, in the way how the sizes of portions of incoming messages were stored. A remote attacker can exploit this flaw by sending crafted messages to an application that is using libotr to perform denial of service attacks (application crash), or potentially, execute arbitrary code with the privileges of the user running the application.

ID	Name	Product	Family	Severity
96241	GLSA-201701-10 : libotr, Pidgin OTR: Remote execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
89919	SUSE SLED12 / SLES12 Security Update : libotr (SUSE-SU-2016:0707-1)	Nessus	SuSE Local Security Checks	critical
89918	SUSE SLED11 / SLES11 Security Update : libotr (SUSE-SU-2016:0706-1)	Nessus	SuSE Local Security Checks	critical
89914	openSUSE Security Update : libotr / libotr2 (openSUSE-2016-333)	Nessus	SuSE Local Security Checks	critical
89866	Ubuntu 12.04 LTS : libotr vulnerability (USN-2926-1)	Nessus	Ubuntu Local Security Checks	critical
89855	openSUSE Security Update : libotr / libotr2 (openSUSE-2016-322)	Nessus	SuSE Local Security Checks	critical
89808	FreeBSD : libotr -- integer overflow (c2b1652c-e647-11e5-85be-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	critical
89794	Debian DSA-3512-1 : libotr - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2016-2851

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical