filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user.

According to the versions of the libmirage package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - libMirage 3.2.2 in CDemu has a NULL pointer dereference     in the NRG parser in parser.c.(CVE-2019-15757)

  - filters/filter-cso/filter-stream.c in the CSO filter in     libMirage 3.2.2 in CDemu does not validate the part     size, triggering a heap-based buffer overflow that can     lead to root access by a local Linux     user.(CVE-2019-15540)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libmirage fixes the following issues :

CVE-2019-15540: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer overflow that could lead to root access by a local user. [boo#1148087]

  - Update to new upstream release 3.2.2

  - ISO parser: fixed ISO9660/UDF pattern search for sector     sizes 2332 and 2336.

  - ISO parser: added support for Nintendo GameCube and Wii     ISO images.

  - Extended medium type guess to distinguish between DVD     and BluRay images based on length.

  - Removed fabrication of disc structures from the library     (moved to CDEmu daemon).

  - MDS parser: cleanup of disc structure parsing, fixed the     incorrectly set structure sizes.

ID	Name	Product	Family	Severity
136268	EulerOS Virtualization for ARM 64 3.0.2.0 : libmirage (EulerOS-SA-2020-1565)	Nessus	Huawei Local Security Checks	high
132844	EulerOS Virtualization for ARM 64 3.0.5.0 : libmirage (EulerOS-SA-2020-1090)	Nessus	Huawei Local Security Checks	high
128456	openSUSE Security Update : libmirage (openSUSE-2019-2040)	Nessus	SuSE Local Security Checks	high
128453	openSUSE Security Update : libmirage (openSUSE-2019-2033)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-15540

high

Tenable Plugins

high

high

high

high