CVE-2018-20861: Input Validation

Q: Which deployments are exposed?

Systems using libopenmpt versions before 0.3.11 are affected when they process an MPTM file containing certain malformed custom tunings.

Q: What does an attacker need to exploit this issue?

An attacker does not need authentication or special privileges, but a user must interact with a crafted MPTM file. Successful exploitation causes a crash, resulting in denial of service.

Q: What is the remediation?

Apply the available patch by updating libopenmpt to version 0.3.11 or later.

Published Jul 30, 2019

Updated

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.

Affected Software

1 affected component

libopenmpt0<0.3.11

Remediation

Patch Available

https://lib.openmpt.org/libopenmpt/2018/07/28/security-updates-0.3.11-0.2.10635-beta34-0.2.7561-beta20.5-p10-0.2.7386-beta20.3-p13/

Event History

Jul 30, 2019

CVE Published

via MITRE·06:32 PM

Data Sourced

via MITRE·06:32 PM

Description

Frequently Asked Questions

Which deployments are exposed?

Systems using libopenmpt versions before 0.3.11 are affected when they process an MPTM file containing certain malformed custom tunings.

What does an attacker need to exploit this issue?

An attacker does not need authentication or special privileges, but a user must interact with a crafted MPTM file. Successful exploitation causes a crash, resulting in denial of service.

What is the remediation?

Apply the available patch by updating libopenmpt to version 0.3.11 or later.

CVE-2018-20861: Input Validation

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the remediation?