CVE-2015-8791 — Sensitive Information Exposure in Libebml

CWE-200 — Sensitive Information Exposure8 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 43.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Matroska Libebml
Timeline
PublishedJan 29
Latest updateMay 17

Description

The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from process heap memory via a crafted length value in an EBML id, which triggers an invalid memory access.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶Debianmatroska/libebml< 1.3.3-1+3
▶NVDmatroska/libebml1.3.2

🔴Vulnerability Details

3
GHSA
GHSA-wrxq-929q-rj83: The EbmlElement::ReadCodedSizeValue function in libEBML before 1↗2022-05-17
▶
OSV
CVE-2015-8791: The EbmlElement::ReadCodedSizeValue function in libEBML before 1↗2016-01-29
▶
CVEList
CVE-2015-8791: The EbmlElement::ReadCodedSizeValue function in libEBML before 1↗2016-01-29
▶

📋Vendor Advisories

1
Debian
CVE-2015-8791: libebml - The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows cont...↗2015
▶

💬Community

3
Bugzilla
CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-7]↗2016-02-02
▶
Bugzilla
CVE-2015-8791 libebml: function EbmlElement::ReadCodedSizeValue leaks information↗2016-02-02
▶
Bugzilla
CVE-2015-8791 CVE-2015-8790 libebml: information leaks in two functions [epel-6]↗2016-02-02
▶
CVE-2015-8791 — Sensitive Information Exposure | cvebase