Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - flac: Heap buffer write overflow in read_residual_partitioned_rice_ (CVE-2014-9028)

  - Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute     arbitrary code via a crafted .flac file. (CVE-2014-8962)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the flac package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A buffer overflow flaw was found in the way flac     decoded FLAC audio files. An attacker could create a     specially crafted FLAC audio file that could cause an     application using the flac library to crash or execute     arbitrary code when the file was read.(CVE-2014-9028)

  - A buffer over-read flaw was found in the way flac     processed certain ID3v2 metadata. An attacker could     create a specially crafted FLAC audio file that could     cause an application using the flac library to crash     when the file was read.(CVE-2014-8962)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update flac to fix security issue in xmms-flac plugin (previously an independent subpackage that was out of date).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read. (CVE-2014-9028)

A buffer over-read flaw was found in the way flac processed certain ID3v2 metadata. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash when the file was read. (CVE-2014-8962)

Multiple vulnerabilities has been discovered and corrected in flac :

Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file (CVE-2014-9028).

Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file (CVE-2014-8962).

The updated packages provides a solution for these security issues.

A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read. (CVE-2014-9028)

A buffer over-read flaw was found in the way flac processed certain ID3v2 metadata. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash when the file was read. (CVE-2014-8962)

After installing the update, all applications linked against the flac library must be restarted for this update to take effect.

Updated flac packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The flac packages contain a decoder and an encoder for the FLAC (Free Lossless Audio Codec) audio file format.

A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read. (CVE-2014-9028)

A buffer over-read flaw was found in the way flac processed certain ID3v2 metadata. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash when the file was read. (CVE-2014-8962)

All flac users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, all applications linked against the flac library must be restarted for this update to take effect.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0767 advisory.

    - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker could execute arbitrary code.

CVE-2014-8962

heap-based buffer overflow in stream_decoder.c, allowing remote attackers to execute arbitrary code via a specially crafted .flac file.

CVE-2014-9028

stack-based buffer overflow in stream_decoder.c, allowing remote attackers to execute arbitrary code via a specially crafted .flac file.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2014-9028, CVE-2014-8962

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated flac packages fix security vulnerabilities :

In libFLAC before 1.3.1, a stack overflow (CVE-2014-8962) and a heap overflow (CVE-2014-9028), which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder.

flac was updated to fix two security issues.

These security issues were fixed :

  - Stack overflow may result in arbitrary code execution     (CVE-2014-8962).

  - Heap overflow via specially crafted .flac files     (CVE-2014-9028).

flac was updated to fix two security issues :

  - Stack overflow may result in arbitrary code execution.
    (CVE-2014-8962)

  - Heap overflow via specially crafted .flac files.
    (CVE-2014-9028)

Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker could execute arbitrary code.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2426-1 advisory.

    Michele Spagnuolo discovered that FLAC incorrectly handled certain malformed audio files. An attacker     could use this issue to cause FLAC to crash, resulting in a denial of service, or possibly execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Erik de Castro Lopo reports :

Google Security Team member, Michele Spagnuolo, recently found two potential problems in the FLAC code base. They are :

- CVE-2014-9028: Heap buffer write overflow.

- CVE-2014-8962: Heap buffer read overflow.

ID	Name	Product	Family	Severity
198660	RHEL 5 : flac (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
124954	EulerOS Virtualization 3.0.1.0 : flac (EulerOS-SA-2019-1451)	Nessus	Huawei Local Security Checks	high
85479	Fedora 23 : flac-1.3.1-5.fc23 (2015-13353)	Nessus	Fedora Local Security Checks	high
85477	Fedora 21 : flac-1.3.1-5.fc21 (2015-13160)	Nessus	Fedora Local Security Checks	high
85424	Fedora 22 : flac-1.3.1-5.fc22 (2015-13145)	Nessus	Fedora Local Security Checks	high
82833	Amazon Linux AMI : flac (ALAS-2015-505)	Nessus	Amazon Linux Local Security Checks	high
82559	Mandriva Linux Security Advisory : flac (MDVSA-2015:188)	Nessus	Mandriva Local Security Checks	high
82521	Scientific Linux Security Update : flac on SL6.x, SL7.x i386/x86_64 (20150401)	Nessus	Scientific Linux Local Security Checks	high
82496	RHEL 6 / 7 : flac (RHSA-2015:0767)	Nessus	Red Hat Local Security Checks	high
82489	Oracle Linux 6 / 7 : flac (ELSA-2015-0767)	Nessus	Oracle Linux Local Security Checks	high
82478	CentOS 6 / 7 : flac (CESA-2015:0767)	Nessus	CentOS Local Security Checks	high
82244	Debian DLA-99-1 : flac security update	Nessus	Debian Local Security Checks	high
80131	Fedora 19 : flac-1.3.1-1.fc19 (2014-16272)	Nessus	Fedora Local Security Checks	high
79984	Mandriva Linux Security Advisory : flac (MDVSA-2014:239)	Nessus	Mandriva Local Security Checks	high
79929	Fedora 20 : mingw-flac-1.3.1-1.fc20 (2014-16270)	Nessus	Fedora Local Security Checks	high
79925	Fedora 19 : mingw-flac-1.3.1-1.fc19 (2014-16251)	Nessus	Fedora Local Security Checks	high
79918	Fedora 21 : flac-1.3.1-1.fc21 (2014-16175)	Nessus	Fedora Local Security Checks	high
79916	Fedora 21 : mingw-flac-1.3.1-1.fc21 (2014-16148)	Nessus	Fedora Local Security Checks	high
79818	openSUSE Security Update : flac (openSUSE-SU-2014:1588-1)	Nessus	SuSE Local Security Checks	high
79792	Fedora 20 : flac-1.3.1-1.fc20 (2014-16258)	Nessus	Fedora Local Security Checks	high
79761	SuSE 11.3 Security Update : flac (SAT Patch Number 10029)	Nessus	SuSE Local Security Checks	high
79636	Debian DSA-3082-1 : flac - security update	Nessus	Debian Local Security Checks	high
79622	Ubuntu 14.04 LTS : FLAC vulnerabilities (USN-2426-1)	Nessus	Ubuntu Local Security Checks	high
79567	FreeBSD : flac -- Multiple vulnerabilities (a33addf6-74e6-11e4-a615-f8b156b6dcc8)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2014-9028

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high