NVD Vulnerability Detail

CVE-2015-7810

Summary	libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files
Publication Date	Nov. 23, 2019, 12:15 a.m.
Registration Date	Jan. 26, 2021, 2:57 p.m.
Last Update	Nov. 21, 2024, 11:37 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:videolan:libbluray::::::::					0.8.0

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.openwall.com/lists/oss-security/2015/10/12/7	Mailing List Third Party Advisory
2	http://www.openwall.com/lists/oss-security/2015/10/12/7	Mailing List Third Party Advisory
3	http://www.securityfocus.com/bid/72769	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/72769	Third Party Advisory VDB Entry
5	https://access.redhat.com/security/cve/cve-2015-7810	Third Party Advisory
6	https://access.redhat.com/security/cve/cve-2015-7810	Third Party Advisory
7	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7810	Exploit Issue Tracking Third Party Advisory
8	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7810	Exploit Issue Tracking Third Party Advisory
9	https://security-tracker.debian.org/tracker/CVE-2015-7810	Third Party Advisory
10	https://security-tracker.debian.org/tracker/CVE-2015-7810	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-367	Time-of-check Time-of-use (TOCTOU) 競合状態	https://cwe.mitre.org/data/definitions/367.html

JVN Vulnerability Information

libbluray MountManager におけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性

Title	libbluray MountManager におけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性
Summary	libbluray MountManager には、Time-of-check Time-of-use (TOCTOU) 競合状態の脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Oct. 12, 2015, midnight
Registration Date	Nov. 28, 2019, 2:30 p.m.
Last Update	Nov. 28, 2019, 2:30 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux

Debian

Debian GNU/Linux

Fedora Project

Fedora

VideoLAN

libbluray

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-7810	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7810
National Vulnerability Database (NVD)
2	CVE-2015-7810	https://nvd.nist.gov/vuln/detail/CVE-2015-7810
Red Hat CVE Database
3	CVE-2015-7810	https://access.redhat.com/security/cve/cve-2015-7810
Security Bug Tracker
4	CVE-2015-7810	https://security-tracker.debian.org/tracker/CVE-2015-7810

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-367	https://cwe.mitre.org/data/definitions/367.html

ベンダー情報

No	Name	URL
Fedora Project
1	Top Page	https://getfedora.org/en/
Red Hat Bugzilla
2	Bug 959433	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-7810
VideoLAN
3	libbluray	https://code.videolan.org/videolan/libbluray

その他

No	Name	URL
関連文書
1	Re: CVE request: BD-J implementation in libbluray	https://www.openwall.com/lists/oss-security/2015/10/12/7

Change Log

No	Changed Details	Date of change
1	[2019年11月28日] 掲載	Nov. 28, 2019, 2:30 p.m.