Mageia 2021-0431: gpac security update
Summary
A specially crafted MPEG-4 input when decoding the atom for the "co64"
FOURCC can cause an integer overflow due to unchecked arithmetic resulting
in a heap-based buffer overflow that causes memory corruption. (CVE-2021-21834)
A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause
an integer overflow due to unchecked arithmetic resulting in a
heap-based buffer overflow that causes memory corruption. (CVE-2021-21836)
A specially crafted MPEG-4 input can cause an integer overflow due to
unchecked arithmetic resulting in a heap-based buffer overflow that
causes memory corruption. (CVE-2021-21837, CVE-2021-21838, CVE-2021-21839)
A specially crafted MPEG-4 input used to process an atom using the "saio"
FOURCC code cause an integer overflow due to unchecked arithmetic
resulting in a heap-based buffer overflow that causes memory corruption.
(CVE-2021-21840)
A specially crafted MPEG-4 input when reading an atom using the 'sbgp'
FOURCC code can cause an integer overflow due to unchecked arithmetic
resulting in a heap-based buffer overflow that causes memory corruption.
(CVE-2021-21841)
A specially crafted MPEG-4 input can cause an integer overflow when
processing an atom using the 'ssix' FOURCC code, due to unchecked
arithmetic resulting in a heap-based buffer overflow that causes memory
corruption. (CVE-2021-21842)
A specially crafted MPEG-4 input can cause an integer overflow due to
unchecked arithmetic resulting in a heap-based buffer overflow that
causes memory corruption. After validating the number of ranges, at [41]
the library will multiply the count by the size of the
GF_SubsegmentRangeInfo structure. On a 32-bit platform, this
multiplication can result in an integer overflow causing the space of the
array being allocated to be less than expected. (CVE-2021-21843)
A specially crafted MPEG-4 input when encountering an atom using the
"stco" FOURCC code, can cause an integer overflow due to unchecked
arithmetic resulting in a heap-based buffer overflow that causes memory
corruption. (CVE-2021-21844)
A specially crafted MPEG-4 input in "stsc" decoder can cause an integer
overflow due to unchecked arithmetic resulting in a heap-based buffer
overflow that causes memory corruption. (CVE-2021-21845)
A specially crafted MPEG-4 input in "stsz&" decoder can cause an integer
overflow due to unchecked arithmetic resulting in a heap-based buffer
overflow that causes memory corruption. (CVE-2021-21846)
A specially crafted MPEG-4 input in "stts" decoder can cause an integer
overflow due to unchecked arithmetic resulting in a heap-based buffer
overflow that causes memory corruption. (CVE-2021-21847)
The library will actually reuse the parser for atoms with the "stsz"
FOURCC code when parsing atoms that use the "stz2" FOURCC code and can
cause an integer overflow due to unchecked arithmetic resulting in a
heap-based buffer overflow that causes memory corruption.
(CVE-2021-21848)
A specially crafted MPEG-4 input can cause an integer overflow when the
library encounters an atom using the "tfra" FOURCC code due to unchecked
arithmetic resulting in a heap-based buffer overflow that causes memory
corruption. (CVE-2021-21849)
A specially crafted MPEG-4 input can cause an integer overflow when the
library encounters an atom using the "trun" FOURCC code due to unchecked
arithmetic resulting in a heap-based buffer overflow that causes memory
corruption. (CVE-2021-21850)
A specially crafted MPEG-4 input can cause an integer overflow due to
unchecked addition arithmetic resulting in a heap-based buffer overflow
that causes memory corruption. (CVE-2021-21853, CVE-2021-21854,
CVE-2021-21855, CVE-2021-21857, CVE-2021-21858)
The stri_box_read function is used when processing atoms using the 'stri'
FOURCC code. (CVE-2021-21859)
A specially crafted MPEG-4 input can cause an improper memory allocation
resulting in a heap-based buffer overflow that causes memory corruption.
The FOURCC code, 'trik', is parsed by the function within the library.
(CVE-2021-21860)
When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input
can cause an improper memory allocation resulting in a heap-based buffer
overflow that causes memory corruption. (CVE-2021-21861)
References
- https://bugs.mageia.org/show_bug.cgi?id=29432
- https://www.debian.org/security/2021/dsa-4966
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21834
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21836
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21837
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21838
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21839
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21840
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21841
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21842
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21843
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21844
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21845
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21846
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21847
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21848
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21849
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21850
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21853
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21854
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21855
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21857
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21858
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21859
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21860
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21861
Resolution
MGASA-2021-0431 - Updated gpac packages fix security vulnerability
SRPMS
- 8/tainted/gpac-1.0.1-1.1.mga8.tainted
