Linux Security
Linux Security
Linux Security

Debian LTS: DLA-1029-1: libmtp security update

Date 17 Jul 2017
529
Posted By LinuxSecurity Advisories
libmtp, a library for communicating with MTP aware devices (like cellular phones and audio players), was found to be vulnerable to several integer overflow vulnerabilities, which allowed malicious devices to cause denial of service crashes and maybe remote code
Package        : libmtp
Version        : 1.1.3-35-g0ece104-5+deb7u1
CVE ID         : CVE-2017-9831 CVE-2017-9832

libmtp, a library for communicating with MTP aware devices (like
cellular phones and audio players), was found to be vulnerable to
several integer overflow vulnerabilities, which allowed malicious
devices to cause denial of service crashes and maybe remote code
execution.

CVE-2017-9831

    An integer overflow vulnerability in the
    ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of
    libmtp (version 1.1.12 and below) allows attackers to cause a
    denial of service (out-of-bounds memory access) or maybe remote
    code execution by inserting a mobile device into a personal
    computer through a USB cable.

CVE-2017-9832

    An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL
    function) of libmtp (version 1.1.12 and below) allows attackers to
    cause a denial of service (out-of-bounds memory access) or maybe
    remote code execution by inserting a mobile device into a personal
    computer through a USB cable.

For Debian 7 "Wheezy", these problems have been fixed in version
1.1.3-35-g0ece104-5+deb7u1.

We recommend that you upgrade your libmtp packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Advisories

LinuxSecurity Poll

How frequently do you patch/update your system?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum 0 answer(s) and maximum 3 answer(s).
/main-polls/52-how-frequently-do-you-patch-update-your-system?task=poll.vote&format=json
52
radio
[{"id":"179","title":"As soon as patches\/updates are released - I track advisories for my distro(s) diligently","votes":"67","type":"x","order":"1","pct":75.28,"resources":[]},{"id":"180","title":"Every so often, when I think of it","votes":"14","type":"x","order":"2","pct":15.73,"resources":[]},{"id":"181","title":"Hardly ever","votes":"8","type":"x","order":"3","pct":8.99,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

Please vote first in order to view vote results.

VOTE ON THE POLL PAGE


VIEW MORE POLLS

bottom 200

Please enable / Bitte aktiviere JavaScript!
Veuillez activer / Por favor activa el Javascript![ ? ]

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.