vendor:
libotr
by:
Markus Vervier
9.8
CVSS
CRITICAL
Memory Corruption
119
CWE
Product Name: libotr
Affected Version From: 4.1.2000
Affected Version To: 4.1.0 and below
Patch Exists: YES
Related CWE: CVE-2016-2851
CPE: a:otr_development_team:libotr:4.1.0
Metasploit:
https://www.rapid7.com/db/vulnerabilities/oracle-solaris-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/alpine-linux-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/ubuntu-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/debian-cve-2016-2851/, https://www.rapid7.com/db/vulnerabilities/freebsd-vid-c2b1652c-e647-11e5-85be-14dae9d210b8/
Platforms Tested:
2016
Memory Corruption Vulnerability in libotr
A remote attacker may crash or execute arbitrary code in libotr by sending large OTR messages. While processing specially crafted messages, attacker controlled data on the heap is written out of bounds. No special user interaction or authorization is necessary in default configurations.
Mitigation:
The vulnerability has been patched in libotr 4.1.1. Users are advised to update to the patched version.
