Debian Wheezy: DLA-1029-1 Moderate: Libmtp Integer Overflow Threat
debian lts
July 17, 2017
libmtp, a library for communicating with MTP aware devices (like cellular phones and audio players), was found to be vulnerable to several integer overflow vulnerabilities, which a...
Topics Covered
Summary
An integer overflow vulnerability in the
ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of
libmtp (version 1.1.12 and below) allows attackers to cause a
denial of service (out-of-bounds memory access) or maybe remote
code execution by inserting a mobile device into a personal
computer through a USB cable.
CVE-2017-9832
An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL
function) of libmtp (version 1.1.12 and below) allows attackers to
cause a denial of service (out-of-bounds memory access) or maybe
remote code execution by inserting a mobile device into a personal
computer through a USB cable.
For Debian 7 "Wheezy", these problems have been fixed in version
1.1.3-35-g0ece104-5+deb7u1.
We recommend that you upgrade your libmtp packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
<pre><font face="Courier">Package: libmtp
Version: 1.1.3-35-g0ece104-5+deb7u1
CVE ID: CVE-2017-9831 CVE-2017-9832
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!