SB2018032833 - Fedora 27 update for bchunk

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2017-15953)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer overflow when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

2) Heap-based buffer overflow (CVE-ID: CVE-2017-15954)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to heap-based buffer overflow when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

3) NULL pointer dereference (CVE-ID: CVE-2017-15955)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference when processing a malformed CUE (.cue) file. A remote attacker can cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://bodhi.fedoraproject.org/updates/FEDORA-2018-1217b02061