GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2017:1988-1

Vulnerability from csaf_suse - Published: 2017-07-28 08:41 - Updated: 2017-07-28 08:41
Summary
Security update for libquicktime
Severity
Moderate
Notes
Title of the patch: Security update for libquicktime
Description of the patch: This update for libquicktime fixes the following issues: Security issues fixed: - CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via a crafted mp4 file was fixed. (bsc#1044077) - CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (bsc#1044009) - CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (bsc#1044008) - CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (bsc#1044122) - CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (bsc#1044006) - CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (bsc#1044002) - CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (bsc#1044000) - CVE-2016-2399: Adjust fix to prevent endless loop when there are less than 256 bytes to read. (bsc#1022805)
Patchnames: sdksp4-libquicktime-13222
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2016-2399
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2017-9122
5.3 (Medium)
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9123
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9124
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9125
5.3 (Medium)
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9126
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9127
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
CVE-2017-9128
4.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 10 products, the same list as for CVE-2016-2399
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1022805 self
https://bugzilla.suse.com/1044000 self
https://bugzilla.suse.com/1044002 self
https://bugzilla.suse.com/1044006 self
https://bugzilla.suse.com/1044008 self
https://bugzilla.suse.com/1044009 self
https://bugzilla.suse.com/1044077 self
https://bugzilla.suse.com/1044122 self
https://www.suse.com/security/cve/CVE-2016-2399/ self
https://www.suse.com/security/cve/CVE-2017-9122/ self
https://www.suse.com/security/cve/CVE-2017-9123/ self
https://www.suse.com/security/cve/CVE-2017-9124/ self
https://www.suse.com/security/cve/CVE-2017-9125/ self
https://www.suse.com/security/cve/CVE-2017-9126/ self
https://www.suse.com/security/cve/CVE-2017-9127/ self
https://www.suse.com/security/cve/CVE-2017-9128/ self
https://www.suse.com/security/cve/CVE-2016-2399 external
https://bugzilla.suse.com/1022805 external
https://www.suse.com/security/cve/CVE-2017-9122 external
https://bugzilla.suse.com/1044000 external
https://bugzilla.suse.com/1044002 external
https://bugzilla.suse.com/1044006 external
https://bugzilla.suse.com/1044008 external
https://bugzilla.suse.com/1044009 external
https://bugzilla.suse.com/1044077 external
https://bugzilla.suse.com/1044122 external
https://bugzilla.suse.com/1051855 external
https://bugzilla.suse.com/1051859 external
https://www.suse.com/security/cve/CVE-2017-9123 external
https://bugzilla.suse.com/1044009 external
https://www.suse.com/security/cve/CVE-2017-9124 external
https://bugzilla.suse.com/1044008 external
https://www.suse.com/security/cve/CVE-2017-9125 external
https://bugzilla.suse.com/1044122 external
https://www.suse.com/security/cve/CVE-2017-9126 external
https://bugzilla.suse.com/1044006 external
https://www.suse.com/security/cve/CVE-2017-9127 external
https://bugzilla.suse.com/1044002 external
https://www.suse.com/security/cve/CVE-2017-9128 external
https://bugzilla.suse.com/1044000 external
https://bugzilla.suse.com/1044002 external
https://bugzilla.suse.com/1044006 external
https://bugzilla.suse.com/1044008 external
https://bugzilla.suse.com/1044009 external
https://bugzilla.suse.com/1044077 external
https://bugzilla.suse.com/1044122 external
https://bugzilla.suse.com/1051855 external
https://bugzilla.suse.com/1051859 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libquicktime",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libquicktime fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-9122: A DoS in quicktime_read_moov function in moov.c via a crafted mp4 file was fixed. (bsc#1044077)\n- CVE-2017-9123: An invalid memory read in lqt_frame_duration via a crafted mp4 file was fixed. (bsc#1044009)\n- CVE-2017-9124: A NULL pointer dereference in quicktime_match_32 via a crafted mp4 file was fixed. (bsc#1044008)\n- CVE-2017-9125: A DoS in lqt_frame_duration function in lqt_quicktime.c via crafted mp4 file was fixed. (bsc#1044122)\n- CVE-2017-9126: A heap-based buffer overflow in quicktime_read_dref_table via a crafted mp4 file was fixed. (bsc#1044006)\n- CVE-2017-9127: A heap-based buffer overflow in quicktime_user_atoms_read_atom via a crafted mp4 file was fixed. (bsc#1044002)\n- CVE-2017-9128: A heap-based buffer over-read in quicktime_video_width via a crafted mp4 file was fixed. (bsc#1044000)\n- CVE-2016-2399: Adjust fix to prevent endless loop when there are less than 256 bytes to read. (bsc#1022805)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-libquicktime-13222",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1988-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:1988-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171988-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:1988-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-July/003071.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022805",
        "url": "https://bugzilla.suse.com/1022805"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044000",
        "url": "https://bugzilla.suse.com/1044000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044002",
        "url": "https://bugzilla.suse.com/1044002"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044006",
        "url": "https://bugzilla.suse.com/1044006"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044008",
        "url": "https://bugzilla.suse.com/1044008"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044009",
        "url": "https://bugzilla.suse.com/1044009"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044077",
        "url": "https://bugzilla.suse.com/1044077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1044122",
        "url": "https://bugzilla.suse.com/1044122"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2399 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2399/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9122 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9122/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9123 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9123/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9124 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9124/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9125 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9125/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9126 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9126/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9127 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9127/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9128 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9128/"
      }
    ],
    "title": "Security update for libquicktime",
    "tracking": {
      "current_release_date": "2017-07-28T08:41:51Z",
      "generator": {
        "date": "2017-07-28T08:41:51Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:1988-1",
      "initial_release_date": "2017-07-28T08:41:51Z",
      "revision_history": [
        {
          "date": "2017-07-28T08:41:51Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libquicktime-1.0.3-6.5.1.i586",
                "product": {
                  "name": "libquicktime-1.0.3-6.5.1.i586",
                  "product_id": "libquicktime-1.0.3-6.5.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libquicktime-devel-1.0.3-6.5.1.i586",
                "product": {
                  "name": "libquicktime-devel-1.0.3-6.5.1.i586",
                  "product_id": "libquicktime-devel-1.0.3-6.5.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libquicktime-1.0.3-6.5.1.ia64",
                "product": {
                  "name": "libquicktime-1.0.3-6.5.1.ia64",
                  "product_id": "libquicktime-1.0.3-6.5.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libquicktime-devel-1.0.3-6.5.1.ia64",
                "product": {
                  "name": "libquicktime-devel-1.0.3-6.5.1.ia64",
                  "product_id": "libquicktime-devel-1.0.3-6.5.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libquicktime-1.0.3-6.5.1.ppc64",
                "product": {
                  "name": "libquicktime-1.0.3-6.5.1.ppc64",
                  "product_id": "libquicktime-1.0.3-6.5.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libquicktime-devel-1.0.3-6.5.1.ppc64",
                "product": {
                  "name": "libquicktime-devel-1.0.3-6.5.1.ppc64",
                  "product_id": "libquicktime-devel-1.0.3-6.5.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libquicktime-1.0.3-6.5.1.s390x",
                "product": {
                  "name": "libquicktime-1.0.3-6.5.1.s390x",
                  "product_id": "libquicktime-1.0.3-6.5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libquicktime-devel-1.0.3-6.5.1.s390x",
                "product": {
                  "name": "libquicktime-devel-1.0.3-6.5.1.s390x",
                  "product_id": "libquicktime-devel-1.0.3-6.5.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libquicktime-1.0.3-6.5.1.x86_64",
                "product": {
                  "name": "libquicktime-1.0.3-6.5.1.x86_64",
                  "product_id": "libquicktime-1.0.3-6.5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libquicktime-devel-1.0.3-6.5.1.x86_64",
                "product": {
                  "name": "libquicktime-devel-1.0.3-6.5.1.x86_64",
                  "product_id": "libquicktime-devel-1.0.3-6.5.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-1.0.3-6.5.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586"
        },
        "product_reference": "libquicktime-1.0.3-6.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-1.0.3-6.5.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64"
        },
        "product_reference": "libquicktime-1.0.3-6.5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-1.0.3-6.5.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64"
        },
        "product_reference": "libquicktime-1.0.3-6.5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-1.0.3-6.5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x"
        },
        "product_reference": "libquicktime-1.0.3-6.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-1.0.3-6.5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64"
        },
        "product_reference": "libquicktime-1.0.3-6.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-devel-1.0.3-6.5.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586"
        },
        "product_reference": "libquicktime-devel-1.0.3-6.5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-devel-1.0.3-6.5.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64"
        },
        "product_reference": "libquicktime-devel-1.0.3-6.5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-devel-1.0.3-6.5.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64"
        },
        "product_reference": "libquicktime-devel-1.0.3-6.5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-devel-1.0.3-6.5.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x"
        },
        "product_reference": "libquicktime-devel-1.0.3-6.5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libquicktime-devel-1.0.3-6.5.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        },
        "product_reference": "libquicktime-devel-1.0.3-6.5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-2399",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2399"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2399",
          "url": "https://www.suse.com/security/cve/CVE-2016-2399"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022805 for CVE-2016-2399",
          "url": "https://bugzilla.suse.com/1022805"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2399"
    },
    {
      "cve": "CVE-2017-9122",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9122"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9122",
          "url": "https://www.suse.com/security/cve/CVE-2017-9122"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044000 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044002 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044006 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044008 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044009 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044077 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044122 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1044122"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1051855 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1051855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1051859 for CVE-2017-9122",
          "url": "https://bugzilla.suse.com/1051859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9122"
    },
    {
      "cve": "CVE-2017-9123",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9123"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9123",
          "url": "https://www.suse.com/security/cve/CVE-2017-9123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044009 for CVE-2017-9123",
          "url": "https://bugzilla.suse.com/1044009"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9123"
    },
    {
      "cve": "CVE-2017-9124",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9124"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9124",
          "url": "https://www.suse.com/security/cve/CVE-2017-9124"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044008 for CVE-2017-9124",
          "url": "https://bugzilla.suse.com/1044008"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9124"
    },
    {
      "cve": "CVE-2017-9125",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9125"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9125",
          "url": "https://www.suse.com/security/cve/CVE-2017-9125"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044122 for CVE-2017-9125",
          "url": "https://bugzilla.suse.com/1044122"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9125"
    },
    {
      "cve": "CVE-2017-9126",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9126"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9126",
          "url": "https://www.suse.com/security/cve/CVE-2017-9126"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044006 for CVE-2017-9126",
          "url": "https://bugzilla.suse.com/1044006"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9126"
    },
    {
      "cve": "CVE-2017-9127",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9127"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9127",
          "url": "https://www.suse.com/security/cve/CVE-2017-9127"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044002 for CVE-2017-9127",
          "url": "https://bugzilla.suse.com/1044002"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9127"
    },
    {
      "cve": "CVE-2017-9128",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9128"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9128",
          "url": "https://www.suse.com/security/cve/CVE-2017-9128"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044000 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044002 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044006 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044008 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044009 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044009"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044077 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044122 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1044122"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1051855 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1051855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1051859 for CVE-2017-9128",
          "url": "https://bugzilla.suse.com/1051859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-1.0.3-6.5.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libquicktime-devel-1.0.3-6.5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-28T08:41:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-9128"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.