CVE-2014-8154: Buffer Overflow
Sergey "Shnatsel" Davidoff reported a heap-based buffer overflow in Vala Gstreamer bindings in the Gst.MapInfo() function. Further details are available in the following Red Hat bug:
https://bugzilla.redhat.com/showbug.cgi?id=1177840
This issue was also reported via: https://bugzilla.gnome.org/showbug.cgi?id=678663
and fixed in the following commit:
https://git.gnome.org/browse/vala/commit/?id=3092537db65887e24a3d3e87a27caf9c5295e4f7
Other sources
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overflow.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8154?
CVE-2014-8154 has a high severity due to the potential for remote code execution from a heap-based buffer overflow.
How do I fix CVE-2014-8154?
To mitigate CVE-2014-8154, update to a patched version of Vala or GStreamer that addresses this vulnerability.
What systems are affected by CVE-2014-8154?
CVE-2014-8154 affects Vala version 0.26.0, 0.26.1, and openSUSE version 13.2.
Is CVE-2014-8154 being actively exploited?
At the time of reporting, there was no indication of active exploitation of CVE-2014-8154 in the wild.
Who reported CVE-2014-8154?
CVE-2014-8154 was reported by Sergey 'Shnatsel' Davidoff.