CVE-2016-9959

Published: Apr 12, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

Affected (9)

Products: Opensuse: Leap, Opensuse · Opensuse Project: Leap · Suse: Linux Enterprise, Linux Enterprise Desktop, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension, Suse Linux Enterprise Server · +1 more

Show all products

Opensuse: Leap, Opensuse · Opensuse Project: Leap · Suse: Linux Enterprise, Linux Enterprise Desktop, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension, Suse Linux Enterprise Server · Game Music Emu Project: Game Music Emu

2 products

Opensuse Project

1 product

5 products

Linux Enterprise

Linux Enterprise Desktop

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Suse Linux Enterprise Server

Game Music Emu Project

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.2
Opensuse Opensuse	Version 12.1
Opensuse Project Leap	Version 42.1
Suse Linux Enterprise	Version 12.0
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Workstation Extension	Version 12
Suse Suse Linux Enterprise Server	Version 12

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Game Music Emu Project Game Music Emu	Up to 0.6.0

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (22)

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html

Source: security@debian.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html

Source: security@debian.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/15/11

Source: security@debian.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/95305

Source: security@debian.org

Third Party AdvisoryVDB Entry

https://bitbucket.org/mpyne/game-music-emu/wiki/Home

Source: security@debian.org

Patch

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/

Source: security@debian.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/

Source: security@debian.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/

Source: security@debian.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/

Source: security@debian.org

https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html

Source: security@debian.org

ExploitTechnical DescriptionThird Party Advisory

https://security.gentoo.org/glsa/201707-02

Source: security@debian.org

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/15/11

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/95305

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bitbucket.org/mpyne/game-music-emu/wiki/Home

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/

Source: af854a3a-2127-422b-91ae-364da2661108

https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitTechnical DescriptionThird Party Advisory

https://security.gentoo.org/glsa/201707-02

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.