faad2: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504 CVE-2019-6956

Debian Bug report logs - #914641
faad2: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504 CVE-2019-6956

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: faad2: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504

Date: Sun, 25 Nov 2018 21:47:22 +0100

Source: faad2
Version: 2.8.8-1
Severity: important
Tags: security upstream
Forwarded: https://sourceforge.net/p/faac/bugs/240/

Hi,

The following vulnerabilities were published for faad2.

CVE-2018-19502[0]:
| An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
| 2.8.1. There was a heap-based buffer overflow in the function
| excluded_channels() in libfaad/syntax.c.

CVE-2018-19503[1]:
| An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
| 2.8.1. There was a stack-based buffer overflow in the function
| calculate_gain() in libfaad/sbr_hfadj.c.

CVE-2018-19504[2]:
| An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
| 2.8.1. There is a NULL pointer dereference in ifilter_bank() in
| libfaad/filtbank.c.

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-19502
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19502
[1] https://security-tracker.debian.org/tracker/CVE-2018-19503
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19503
[2] https://security-tracker.debian.org/tracker/CVE-2018-19504
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19504

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Message #10 received at 914641@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: 914641@bugs.debian.org

Subject: Re: Bug#914641: faad2: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504

Date: Sat, 26 Jan 2019 10:59:42 +0100

Control: retitle -1 faad2: CVE-2018-19502 CVE-2018-19503 CVE-2018-19504 CVE-2019-6956

On Sun, Nov 25, 2018 at 09:47:22PM +0100, Salvatore Bonaccorso wrote:
> Source: faad2
> Version: 2.8.8-1
> Severity: important
> Tags: security upstream
> Forwarded: https://sourceforge.net/p/faac/bugs/240/
> 
> Hi,
> 
> The following vulnerabilities were published for faad2.
> 
> CVE-2018-19502[0]:
> | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
> | 2.8.1. There was a heap-based buffer overflow in the function
> | excluded_channels() in libfaad/syntax.c.
> 
> CVE-2018-19503[1]:
> | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
> | 2.8.1. There was a stack-based buffer overflow in the function
> | calculate_gain() in libfaad/sbr_hfadj.c.
> 
> CVE-2018-19504[2]:
> | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2)
> | 2.8.1. There is a NULL pointer dereference in ifilter_bank() in
> | libfaad/filtbank.c.

One more issue was reported (unfortunately in the same upstream bug,
so add it to the list here as well) in
https://sourceforge.net/p/faac/bugs/240/  which later on was assigned
CVE-2019-6956.

CVE-2109-6956 relates to the issue in
https://github.com/TeamSeri0us/pocs/blob/master/faad/global-buffer-overflow%40ps_mix_phase.md

Regards,
Salvatore

Send a report that this bug log contains spam.