Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow.

The remote host is affected by the vulnerability described in GLSA-201701-55 (DirectFB: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in DirectFB. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could cause a Denial of Service condition or execute       arbitrary code via the Voodoo interface.
  Workaround :

    There is no known workaround at this time.

DirectFB was updated to fix two security issues.

The following vulnerabilities were fixed :

  - CVE-2014-2977: Multiple integer signedness errors could     allow remote attackers to cause a denial of service     (crash) and possibly execute arbitrary code via the     Voodoo interface, which triggers a stack-based buffer     overflow.

  - CVE-2014-2978: Remote attackers could cause a denial of     service (crash) and possibly execute arbitrary code via     the Voodoo interface, which triggers an out-of-bounds     write.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated directfb packages fix security vulnerabilities :

Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow (CVE-2014-2977).

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write (CVE-2014-2978).

DirectFB was updated to fix two security issues.

The following vulnerabilities were fixed :

  - CVE-2014-2977: Multiple integer signedness errors could     allow remote attackers to cause a denial of service     (crash) and possibly execute arbitrary code via the     Voodoo interface, which triggers a stack-based buffer     overflow.

  - CVE-2014-2978: Remote attackers could cause a denial of     service (crash) and possibly execute arbitrary code via     the Voodoo interface, which triggers an out-of-bounds     write.

ID	Name	Product	Family	Severity
96690	GLSA-201701-55 : DirectFB: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
83724	SUSE SLED12 / SLES12 Security Update : DirectFB (SUSE-SU-2015:0839-1)	Nessus	SuSE Local Security Checks	critical
83247	Mandriva Linux Security Advisory : directfb (MDVSA-2015:223)	Nessus	Mandriva Local Security Checks	critical
83171	openSUSE Security Update : DirectFB (openSUSE-2015-340)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2014-2977

critical

Tenable Plugins

critical

critical

critical

critical