Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2015-8792 Details

Description

The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers an invalid memory access.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://lists.matroska.org/pipermail/matroska-users/2015-October/006985.html CVEPatch
http://lists.opensuse.org/opensuse-updates/2016-01/msg00035.html CVE
https://github.com/Matroska-Org/libmatroska/blob/release-1.4.4/ChangeLog CVEPatch
https://github.com/Matroska-Org/libmatroska/commit/0a2d3e3644a7453b6513db2f9bc270f77943573f CVE
http://www.debian.org/security/2016/dsa-3526 CVE

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer[email protected]
CWE-200Exposure of Sensitive Information to an Unauthorized Actor[email protected]

Affected Products

ProductVersions
matroska libmatroska
<= 1.4.3

CPE

  • cpe:2.3:a:matroska:libmatroska:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
opensuse leap
42.1

CPE

  • cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
opensuse opensuse
13.1
13.2

CPE

  • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

11 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2015-8792
NVD Published Date:
Jan 29, 2016
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2015-8792 Details - Not Deferred