Integer Overflow Vulnerability in Biosig Package Leading to Arbitrary Code Execution
Summary
DEBIAN-CVE-2024-21812: An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). Affects biosig versions < 2.6.0-1. Fixed in 2.6.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Biosig Project's libbiosig is a library designed for processing biometric data, particularly in relation to signal processing. It is utilized in various applications that require secure and reliable handling of biometric signals. The package is available in Debian distributions, specifically versions 13 and 14. This library is critical for applications that depend on accurate biometric data analysis, making its security paramount.
Vulnerability Detail
An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig versions prior to 2.6.0-1. This vulnerability can be exploited by an attacker using a specially crafted .famos file, leading to an out-of-bounds write. Such an exploit can result in arbitrary code execution, allowing the attacker to execute malicious code on the affected system. The vulnerability arises from improper handling of input data, which fails to validate the size of the data being processed.
How To Fix
Minimum fixed version
2.6.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade biosigTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid opening .famos files from untrusted sources to mitigate the risk of exploitation until the package is updated.
Conclusion
The integer overflow vulnerability in the Biosig package poses a significant risk, allowing for potential arbitrary code execution through malicious .famos files. It is crucial for users to update to the latest version to mitigate this risk and to exercise caution when handling biometric data files.
See every vulnerability recorded for biosig →
FAQ
The vulnerability is an integer overflow that can lead to out-of-bounds writes and arbitrary code execution.
Versions prior to 2.6.0-1 of the Biosig package are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, avoid using .famos files from untrusted sources to reduce the risk of exploitation.
More information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-21812.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for biosig.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
