CVE-2021-3405

概要

参考情報

• Matroska-Org/libebml · Exploit
• lists.debian.org/debian-lts-announce/2021/04/msg00016.html · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GCLEX2DMJFEOWPW7
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHIIMWZKHHELFF4NRDMOOCS3HKK3K4DF
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YY7R2JZRO5I6WS62KTJFTZGKYELVFTVB
• security.gentoo.org/glsa/202208-21 · Third Party Advisory

libebml のその他の脆弱性

• CVE-2023-52339中 6.5In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
• CVE-2015-8791中 4.3The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from…
• CVE-2015-8790中 4.3The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information fr…
• CVE-2015-8789緊急 9.6Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified…