CVE-2015-8792 - Vulnerability Details - OpenCVE

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00312.

Key SSVC decision points have not yet been added.

Vendors	Products
Matroska	Libmatroska
Opensuse	Leap Opensuse

Configuration 1 [-]

cpe:2.3:a:matroska:libmatroska:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR	cpe:2.3:o:opensuse:leap:42.1:::::::*
	cpe:2.3:o:opensuse:opensuse:13.1:::::::*
	cpe:2.3:o:opensuse:opensuse:13.2:::::::*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html
http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html
http://www.debian.org/security/2016/dsa-3526
https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog
https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-01-29T19:00:00

Updated: 2024-08-06T08:29:22.052Z

Reserved: 2016-01-29T00:00:00

Link: CVE-2015-8792

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2016-01-29T19:59:04.203

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-8792

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-10-20T00:00:00", "descriptions": [{"lang": "en", "value": "The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-12-01T16:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f"}, {"name": "openSUSE-SU-2016:0125", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html"}, {"name": "DSA-3526", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2016/dsa-3526"}, {"name": "[matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-8792", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog", "refsource": "CONFIRM", "url": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog"}, {"name": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f", "refsource": "CONFIRM", "url": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f"}, {"name": "openSUSE-SU-2016:0125", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html"}, {"name": "DSA-3526", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3526"}, {"name": "[matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes", "refsource": "MLIST", "url": "http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:29:22.052Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f"}, {"name": "openSUSE-SU-2016:0125", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html"}, {"name": "DSA-3526", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2016/dsa-3526"}, {"name": "[matroska-users] 20151020 libEBML v1.3.3, libMatroska v1.4.4 released: important fixes", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-8792", "datePublished": "2016-01-29T19:00:00", "dateReserved": "2016-01-29T00:00:00", "dateUpdated": "2024-08-06T08:29:22.052Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:matroska:libmatroska:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA7C862C-7095-4CAE-A873-9056C6C6A878", "versionEndIncluding": "1.4.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*", "matchCriteriaId": "4863BE36-D16A-4D75-90D9-FD76DB5B48B7", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*", "matchCriteriaId": "A10BC294-9196-425F-9FB0-B1625465B47F", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*", "matchCriteriaId": "03117DF1-3BEC-4B8D-AD63-DBBDB2126081", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access."}, {"lang": "es", "value": "La funci\u00f3n KaxInternalBlock::ReadData en libMatroska en versiones anteriores a 1.4.4 permite a atacantes dependientes del contexto obtener informaci\u00f3n sensible desde la memoria din\u00e1mica de proceso a trav\u00e9s de un EBML lacing manipulado, lo que desencadena un acceso a memoria no v\u00e1lido."}], "id": "CVE-2015-8792", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-01-29T19:59:04.203", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html"}, {"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2016/dsa-3526"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog"}, {"source": "cve@mitre.org", "url": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2016/dsa-3526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}