An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - opus: Memory corruption during media file and data processing (CVE-2017-0381)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - opus: Memory corruption during media file and data processing (CVE-2017-0381)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - opus: Memory corruption during media file and data processing (CVE-2017-0381)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the augeas package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The Opus codec is designed for interactive speech and     audio transmission over the Internet. It is designed by     the IETF Codec Working Group and incorporates     technology from Skype's SILK codec and Xiph.Org's CELT     codec.Security Fix(es):An information disclosure     vulnerability in silk/NLSF_stabilize.c in libopus in     Mediaserver could enable a local malicious application     to access data outside of its permission levels. This     issue is rated as Moderate because it could be used to     access sensitive data without permission. Product:
    Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.
    Android ID: A-31607432.(CVE-2017-0381)Augeas versions     up to and including 1.8.0 are vulnerable to heap-based     buffer overflow due to improper handling of escaped     strings. Attacker could send crafted strings that would     cause the application using augeas to copy past the end     of a buffer, leading to a crash or possible code     execution.(CVE-2017-7555)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An information disclosure vulnerability in     silk/NLSF_stabilize.c in libopus in Mediaserver could     enable a local malicious application to access data     outside of its permission levels. This issue is rated     as Moderate because it could be used to access     sensitive data without permission. (CVE-2017-0381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An information disclosure vulnerability in     silk/NLSF_stabilize.c in libopus in Mediaserver could     enable a local malicious application to access data     outside of its permission levels. This issue is rated     as Moderate because it could be used to access     sensitive data without permission. Product: Android.
    Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android     ID: A-31607432.(CVE-2017-0381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Apple iOS running on the mobile device is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208143 security advisory.

The remote host is running a version of macOS that is prior to 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - AppSandbox
 - AppleScript
 - Application Firewall
 - ATS
 - Audio
 - CFNetwork
 - CFNetwork Proxies
 - CFString
 - Captive Network Assistant
 - CoreAudio
 - CoreText
 - DesktopServices
 - Directory Utility
 - file
 - Fonts
 - fsck_msdos
 - HFS
 - Heimdal
 - HelpViewer
 - IOFireWireFamily
 - ImageIO
 - Installer
 - Kernel
 - kext tools
 - libarchive
 - libc
 - libexpat
 - Mail
 - Mail Drafts
 - ntp
 - Open Scripting Architecture
 - PCRE
 - Postfix
 - Quick Look
 - QuickTime
 - Remote Management
 - SQLite
 - Sandbox
 - Screen Lock
 - Security
 - Spotlight
 - WebKit
 - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, 10.12.x prior to 10.12.6, or is not macOS 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache
  - AppSandbox
  - AppleScript
  - Application Firewall
  - ATS
  - Audio
  - CFNetwork
  - CFNetwork Proxies
  - CFString
  - Captive Network Assistant
  - CoreAudio
  - CoreText
  - DesktopServices
  - Directory Utility
  - file
  - Fonts
  - fsck_msdos
  - HFS
  - Heimdal
  - HelpViewer
  - IOFireWireFamily
  - ImageIO
  - Installer
  - Kernel
  - kext tools
  - libarchive
  - libc
  - libexpat
  - Mail
  - Mail Drafts
  - ntp
  - Open Scripting Architecture
  - PCRE
  - Postfix
  - Quick Look
  - QuickTime
  - Remote Management
  - SQLite
  - Sandbox
  - Screen Lock
  - Security
  - Spotlight
  - WebKit
  - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The version of Apple iOS running on the mobile device is prior to 11. It is, therefore, affected by multiple vulnerabilities as described in the HT208112 security advisory.

This update for opus fixes the following issues :

  - CVE-2017-0381: Fixed a remote code execution     vulnerability in silk/NLSF_stabilize.c when playing     certain media files (bsc#1020102)

This update was imported from the SUSE:SLE-12:Update update project.

The remote host is affected by the vulnerability described in GLSA-201702-21 (Opus: User-assisted execution of arbitrary code)

    A large NLSF values could cause the stabilization code in       silk/NLSF_stabilize.c to wrap-around and have the last value in       NLSF_Q15[] to be negative, close to -32768.
    Under normal circumstances, the code will simply read from the wrong       table resulting in an unstable LPC filter. The filter would then go       through the LPC stabilization code at the end of silk_NLSF2A().
    Ultimately, the output audio would be garbage, but no worse than with       any other harmless bad packet.
    Please see the referenced upstream patch and Debian bug report below for       a detailed analysis.
    However, the original report was about a successful exploitation of       Android&rsquo;s Mediaserver in conjunction with this vulnerability.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       stream, possibly resulting in execution of arbitrary code with the       privileges of the process, or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for opus fixes the following issues :

  - CVE-2017-0381: Fixed a remote code execution     vulnerability in silk/NLSF_stabilize.c when playing     certain media files (bsc#1020102)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2017-0381

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A remote code execution vulnerability was discovered in opus, an audio codec, that could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.

For Debian 7 'Wheezy', these problems have been fixed in version 0.9.14+20120615-1+nmu1+deb7u1.

We recommend that you upgrade your opus packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
200020	RHEL 7 : opus (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
200013	RHEL 6 : opus (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199980	RHEL 5 : opus (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196622	RHEL 7 : opus (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196538	RHEL 5 : opus (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196535	RHEL 6 : opus (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
144734	EulerOS Virtualization for ARM 64 3.0.2.0 : augeas (EulerOS-SA-2021-1042)	Nessus	Huawei Local Security Checks	critical
142251	EulerOS 2.0 SP2 : opus (EulerOS-SA-2020-2377)	Nessus	Huawei Local Security Checks	high
142086	EulerOS 2.0 SP5 : opus (EulerOS-SA-2020-2293)	Nessus	Huawei Local Security Checks	high
140838	EulerOS 2.0 SP3 : opus (EulerOS-SA-2020-2071)	Nessus	Huawei Local Security Checks	high
700542	Apple iOS < 11.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical
700511	macOS < 10.13 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
103598	macOS < 10.13 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
103420	Apple iOS < 11 Multiple Vulnerabilities	Nessus	Mobile Devices	critical
97286	openSUSE Security Update : opus (openSUSE-2017-277)	Nessus	SuSE Local Security Checks	high
97264	GLSA-201702-21 : Opus: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
97096	SUSE SLED12 / SLES12 Security Update : opus (SUSE-SU-2017:0436-1)	Nessus	SuSE Local Security Checks	high
96674	Fedora 25 : opus (2017-0d9bdbd9dd)	Nessus	Fedora Local Security Checks	high
96673	Fedora 24 : opus (2017-0bf77c4b1b)	Nessus	Fedora Local Security Checks	high
96665	Debian DLA-793-1 : opus security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-0381

high

Tenable Plugins

high

high

high

high

high

high

critical

high

high

high

critical

critical

critical

critical

high

high

high

high

high

high