Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Debian LTS: DLA-2169-1 Critical: libmtp Denial of Service Threat

debian lts
Calendar Grey April 5, 2020
Scroller Debian Lts
Enhance libmtp to address security weaknesses and remote execution flaws in Debian LTS.
libmtp is a library for communicating with MTP aware devices
Topics%20covered

Topics Covered

security advisory denial of service remote code execution debian libmtp

Summary

CVE-2017-9831

An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx
function of the ptp-pack.c file allows attackers to cause a denial of
service (out-of-bounds memory access) or maybe remote code execution by
inserting a mobile device into a personal computer through a USB cable.

CVE-2017-9832

An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function)
allows attackers to cause a denial of service (out-of-bounds memory
access) or maybe remote code execution by inserting a mobile device into
a personal computer through a USB cable.

For Debian 8 "Jessie", these problems have been fixed in version
1.1.8-1+deb8u1.

We recommend that you upgrade your libmtp packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: libmtp
Version: 1.1.8-1+deb8u1
CVE ID: CVE-2017-9831 CVE-2017-9832

Topics%20covered

Topics Covered

security advisory denial of service remote code execution debian libmtp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.