An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructors two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adplug | Adplug_project | 2.3.1 (including) | 2.3.1 (including) |
| Adplug | Ubuntu | bionic | * |
| Adplug | Ubuntu | cosmic | * |
| Adplug | Ubuntu | esm-apps/bionic | * |
| Adplug | Ubuntu | esm-apps/xenial | * |
| Adplug | Ubuntu | trusty | * |
| Adplug | Ubuntu | upstream | * |
| Adplug | Ubuntu | xenial | * |
Potential Mitigations
References
- https://github.com/adplug/adplug/issues/67
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
- https://github.com/adplug/adplug/issues/67
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/