Test Kennung:	1.3.6.1.4.1.25623.1.0.891029
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for libmtp (DLA-1029-1)
Zusammenfassung:	libmtp, a library for communicating with MTP aware devices (like;cellular phones and audio players), was found to be vulnerable to;several integer overflow vulnerabilities, which allowed malicious;devices to cause denial of service crashes and maybe remote code;execution.;;CVE-2017-9831;;An integer overflow vulnerability in the;ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of;libmtp (version 1.1.12 and below) allows attackers to cause a;denial of service (out-of-bounds memory access) or maybe remote;code execution by inserting a mobile device into a personal;computer through a USB cable.;;CVE-2017-9832;;An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL;function) of libmtp (version 1.1.12 and below) allows attackers to;cause a denial of service (out-of-bounds memory access) or maybe;remote code execution by inserting a mobile device into a personal;computer through a USB cable.
Beschreibung:	Summary: libmtp, a library for communicating with MTP aware devices (like cellular phones and audio players), was found to be vulnerable to several integer overflow vulnerabilities, which allowed malicious devices to cause denial of service crashes and maybe remote code execution. CVE-2017-9831 An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version 1.1.12 and below) allows attackers to cause a denial of service (out-of-bounds memory access) or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable. CVE-2017-9832 An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1.12 and below) allows attackers to cause a denial of service (out-of-bounds memory access) or maybe remote code execution by inserting a mobile device into a personal computer through a USB cable. Affected Software/OS: libmtp on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 1.1.3-35-g0ece104-5+deb7u1. We recommend that you upgrade your libmtp packages. CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9831 https://lists.debian.org/debian-lts-announce/2020/04/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2017-9832
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.