Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a
    denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping
    equalization." (CVE-2016-7969)

  - Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote
    attackers to cause a denial of service via unspecified vectors. (CVE-2016-7970)

  - The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to
    cause a denial of service (memory allocation failure) via unspecified vectors. (CVE-2016-7972)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4797-1 advisory.

    It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use     this issue to cause a denial of service. One of the issues, CVE-2016-7970, only affected Ubuntu 16.04 ESM.
    (CVE-2016-7969, CVE-2016-7970, CVE-2016-7972)

    It was discovered that LibASS incorrectly handled parsing operations for specific nested character     strings. An attacker could possibly use this issue to cause a denial of service. This issue was only fixed     in Ubuntu 16.04 LTS. (CVE-2020-24994)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201702-25 (libass: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libass. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause a Denial of Service condition or other       unknown impacts via unknown attack vectors.
  Workaround :

    There is no known workaround at this time.

This update for libass fixes the following issues: CVE-2016-7969, CVE-2016-7970, CVE-2016-7971, CVE-2016-7972: Fixed multiple memory allocation issues found by fuzzing (bsc#1002982).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 25 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-d2a05a0644 advisory.

    Fixes CVE-2016-7969, CVE-2016-7970 and CVE-2016-7972

    ----

    Update to 0.13.3.

    Contains various bugfixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 23 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-95407a836f advisory.

    Fixes CVE-2016-7969, CVE-2016-7970 and CVE-2016-7972

    ----

    Update to 0.13.3.

    Contains various bugfixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-282507c3e9 advisory.

    Fixes CVE-2016-7969, CVE-2016-7970 and CVE-2016-7972

    ----

    Update to 0.13.3.

    Contains various bugfixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
435808	Alpine: multiple libass packages: security update to 0.13.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
435808	Alpine: multiple libass packages: security update to 0.13.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
426751	Alpine: multiple libass packages: security update to 0.13.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426751	Alpine: multiple libass packages: security update to 0.13.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
405131	Alpine: multiple libass packages: security update to 0.13.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405131	Alpine: multiple libass packages: security update to 0.13.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
183548	Ubuntu 16.04 ESM : LibASS vulnerabilities (USN-4797-1)	Nessus	Ubuntu Local Security Checks	high
400955	Alpine: multiple libass packages: security update to 0.13.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400955	Alpine: multiple libass packages: security update to 0.13.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
97268	GLSA-201702-25 : libass: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
95798	SUSE SLED12 / SLES12 Security Update : libass (SUSE-SU-2016:3107-1)	Nessus	SuSE Local Security Checks	high
94865	Fedora 25 : libass (2016-d2a05a0644)	Nessus	Fedora Local Security Checks	high
94487	Fedora 23 : libass (2016-95407a836f)	Nessus	Fedora Local Security Checks	high
94235	Fedora 24 : libass (2016-282507c3e9)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2016-7970

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high