A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5356-1 advisory.

    Alexandre Bartel discovered that DOSBox incorrectly handled long lines in certain files. An attacker could     possibly use this issue to execute arbitrary code. (CVE-2019-7165)

    Alexandre Bartel discovered that DOSBox incorrectly performed access control over certain directories. An     attacker could possibly use this issue to execute arbitrary code. (CVE-2019-12594)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for dosbox fixes the following issues :

Security issues fixed :

  - CVE-2019-7165: Fixed that a very long line inside a bat     file would overflow the parsing buffer (bnc#1140254).

  - CVE-2019-12594: Added a basic permission system so that     a program running inside DOSBox can't access the     contents of /proc (e.g. /proc/self/mem) when / or /proc     were (to be) mounted (bnc#1140254).

  - Several other fixes for out of bounds access and buffer     overflows.

Two vulnerabilities were discovered in the DOSBox emulator, which could result in the execution of arbitrary code on the host running DOSBox when running a malicious executable in the emulator.

Update to 0.74-3 (CVE-2019-7165 + CVE-2019-12594).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several security vulnerabilities were discovered in DOSBox, an emulator for running old DOS programs.

CVE-2019-7165

A very long line inside a bat file would overflow the parsing buffer which could be used by an attacker to execute arbitrary code.

CVE-2019-12594

Insufficient access controls inside DOSBox allowed attackers to access resources on the host system and execute arbitrary code.

For Debian 8 'Jessie', these problems have been fixed in version 0.74-4+deb8u1.

We recommend that you upgrade your dosbox packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
159364	Ubuntu 18.04 LTS : DOSBox vulnerabilities (USN-5356-1)	Nessus	Ubuntu Local Security Checks	critical
127997	openSUSE Security Update : dosbox (openSUSE-2019-1905)	Nessus	SuSE Local Security Checks	critical
126608	Debian DSA-4478-1 : dosbox - security update	Nessus	Debian Local Security Checks	critical
126515	Fedora 30 : dosbox (2019-6b86d0f1c0)	Nessus	Fedora Local Security Checks	critical
126511	Debian DLA-1845-1 : dosbox security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-7165

critical

Tenable Plugins

critical

critical

critical

critical

critical