CVE-2015-8790 — Sensitive Information Exposure in Libebml

CWE-200 — Sensitive Information Exposure9 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
0.5%
top 32.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Matroska Libebml
Timeline
PublishedJan 29
Latest updateMay 17

Description

The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted UTF-8 string, which triggers an invalid memory access.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶Debianmatroska/libebml< 1.3.3-1+3
▶NVDmatroska/libebml1.3.2

🔴Vulnerability Details

3
GHSA
GHSA-jhvm-j3gg-ph57: The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1↗2022-05-17
▶
CVEList
CVE-2015-8790: The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1↗2016-01-29
▶
OSV
CVE-2015-8790: The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1↗2016-01-29
▶

📋Vendor Advisories

1
Debian
CVE-2015-8790: libebml - The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows co...↗2015
▶

💬Community

4
Bugzilla
CVE-2016-1514 libebml: EbmlUnicodeString Heap Information Leak↗2017-01-12
▶
Bugzilla
CVE-2015-8790 libebml: the EbmlUnicodeString::UpdateFromUTF8 function leaks information↗2016-02-02
▶
Bugzilla
CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-7]↗2016-02-02
▶
Bugzilla
CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6]↗2016-02-02
▶
CVE-2015-8790 — Sensitive Information Exposure | cvebase