CVE Vulnerabilities

CVE-2015-8789

Published: Jan 29, 2016 | Modified: Jan 20, 2017
CVSS 3.x
9.6
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a deeply nested element with infinite size followed by another element of an upper level in an EBML document.

Affected Software

Name Vendor Start Version End Version
Libebml Matroska * 1.3.2 (including)
Libebml Ubuntu precise *
Libebml Ubuntu trusty *
Libebml Ubuntu upstream *
Libebml Ubuntu vivid *
Libebml Ubuntu wily *

References