CVE-2018-20861: Input Validation
Published Jul 30, 2019
·Updated
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
Affected Software
1 affected component
libopenmpt0<0.3.11
Remediation
Event History
Jul 30, 2019
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
Description
Frequently Asked Questions
1
Which deployments are exposed?
Systems using libopenmpt versions before 0.3.11 are affected when they process an MPTM file containing certain malformed custom tunings.
2
What does an attacker need to exploit this issue?
An attacker does not need authentication or special privileges, but a user must interact with a crafted MPTM file. Successful exploitation causes a crash, resulting in denial of service.
3
What is the remediation?
Apply the available patch by updating libopenmpt to version 0.3.11 or later.