Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary

PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities.

Vulnerability Details

CVEID: CVE-2016-9634**
DESCRIPTION:** GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder. By using a specially-crafted ‘start_line’ parameter, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVSS Base Score: 7.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121661 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID: CVE-2016-9635**
DESCRIPTION:** GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder. By providing a ‘skip count’ that goes beyond initialized buffer, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVSS Base Score: 7.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121668 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID: CVE-2016-9636**
DESCRIPTION:** GStreamer is vulnerable to a denial of service, caused by heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder. By using the start_line parameter, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service.
CVSS Base Score: 7.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121546 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID: CVE-2016-9807**
DESCRIPTION:** Gstreamer is vulnerable to a denial of service, caused by an invalid memory read issue in flx_decode_chunks function in gst/flx/gstflxdec.c. By persuading a victim to open a specially-crafted FLIC file, an attacker could exploit this vulnerability to cause the application to crash.
CVSS Base Score: 5.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121060 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

CVEID: CVE-2016-9808**
DESCRIPTION:** GStreamer is vulnerable to a denial of service, caused by an out-of-bounds write issue in FLIC decoder function. By sending a specially-crafted series of skip and count pairs, an attacker could exploit this vulnerability to cause the application to crash.
CVSS Base Score: 7.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/121061 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

PowerKVM 3.1

Remediation/Fixes

Customers can update PowerKVM systems by using “yum update”.

Fix images are made available via Fix Central. For version 3.1, see <https://ibm.biz/BdHggw&gt;. This issue is addressed as of 3.1.0.2 update 7 or later.

Version 2.1 is unaffected.

Workarounds and Mitigations

None