CVE-2019-14382: Medium severity libopenmpt0 vulnerability
Published Jul 30, 2019
·Updated
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
Affected Software
1 affected component
libopenmpt0<0.4.2
Remediation
Event History
Jul 30, 2019
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
Description
Frequently Asked Questions
1
Which deployments are affected?
The affected component is libopenmpt before version 0.4.2. Systems using libopenmpt0 should be checked for an installed version earlier than 0.4.2.
2
What is required to trigger the issue?
An attacker needs to cause the target to parse a crafted DSM file. No privileges are required, but user interaction is required according to the CVSS vector.
3
What is the practical impact?
Successful exploitation can cause an assertion failure and denial of service during file parsing. The provided CVSS data indicates no confidentiality or integrity impact.
4
What should be done to remediate the vulnerability?
Apply the available patch by updating libopenmpt to a fixed release. The referenced libopenmpt security update identifies 0.4.2 as the relevant fixed version for this issue.