CVE-2014-8154 Memory corruption in n/a
Heap-based buffer overflow in Vala GStreamer bindings allows attackers to cause denial of service or execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2014-8154?
CVE-2014-8154 is a high-severity memory corruption vulnerability in Opensuse Opensuse, published on 27 Jan 2015.
Official description
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overflow.
Weakness: CWE-119
Which versions are affected by CVE-2014-8154?
It affects 2 products.
Products include Gnome Vala, Opensuse Opensuse.
How do I fix CVE-2014-8154?
No fix has been published for CVE-2014-8154 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-8154 being exploited?
There is no known exploitation of CVE-2014-8154 in the wild and no public exploit code.
Sources
Also known as GHSA-6r73-hjf3-x2hp.