Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:3819-1

Опубликовано: 20 нояб. 2018
Источник: suse-cvrf

Описание

Security update for libmatroska, mkvtoolnix

This update for libmatroska, mkvtoolnix fixes the following issues:

Security issue fixed:

  • CVE-2018-4022: Fixed use-after-free vulnerability that existed in the way MKV (matroska) file format was handled (bsc#1113709).

Список пакетов

SUSE Package Hub for SUSE Linux Enterprise 15
mkvtoolnix-28.2.0-bp150.2.3.1
mkvtoolnix-gui-28.2.0-bp150.2.3.1

Описание

A use-after-free vulnerability exists in the way MKVToolNix MKVINFO v25.0.0 handles the MKV (matroska) file format. A specially crafted MKV file can cause arbitrary code execution in the context of the current user.


Затронутые продукты
SUSE Package Hub for SUSE Linux Enterprise 15:mkvtoolnix-28.2.0-bp150.2.3.1
SUSE Package Hub for SUSE Linux Enterprise 15:mkvtoolnix-gui-28.2.0-bp150.2.3.1

Ссылки