An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.

The remote host is affected by the vulnerability described in GLSA-201908-26 (libofx: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libofx. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to process a specially crafted       file using an application linked against libofx, possibly resulting in       execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for libofx fixes the following issues :

The following security vulnerabilities have been addressed :

  - CVE-2017-2920: Fixed an exploitable buffer overflow in     the tag parsing functionality, which could result in an     out of bounds write and could be triggered via a     specially crafted OFX file (boo#1061964)

  - CVE-2017-2816: Fixed another buffer overflow in the tag     parsing functionality, which could result in an stack     overflow and could be triggered via a specially crafted     OFX file (boo#1058673)

This update for libofx fixes the following issues: Security issues fixed :

  - CVE-2017-2816: Fix an exploitable buffer overflow     vulnerability in the tag parsing functionality     (bsc#1058673).

  - CVE-2017-2920: Fix a buffer overflow vulnerability in     sanitize_proprietary_tags in lib/ofx_preproc.cpp     (bsc#1061964).

  - CVE-2017-14731: Fix remote denial of service via a     crafted file in ofx_proc_file in ofx_preproc.cpp     (bsc#1060437).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

CVE-2017-2816 An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.

CVE-2017-14731 ofx_proc_file in ofx_preproc.cpp allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file

For Debian 7 'Wheezy', these problems have been fixed in version 1:0.9.4-2.1+deb7u1.

We recommend that you upgrade your libofx packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Talos developers report :

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.

ID	Name	Product	Family	Severity
128441	GLSA-201908-26 : libofx: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
111585	openSUSE Security Update : libofx (openSUSE-2018-820)	Nessus	SuSE Local Security Checks	high
111368	SUSE SLED12 Security Update : libofx (SUSE-SU-2018:2064-1)	Nessus	SuSE Local Security Checks	high
104751	Debian DLA-1192-1 : libofx security update	Nessus	Debian Local Security Checks	high
103524	FreeBSD : libofx -- exploitable buffer overflow (58fafead-cd13-472f-a9bd-d0173ba1b04c)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-2816

high

Tenable Plugins

high

high

high

high

high