Out-of-Bounds Write Vulnerability in Biosig Package Leading to Arbitrary Code Execution
Summary
DEBIAN-CVE-2024-23606: An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). Affects biosig versions < 2.6.0-1. Fixed in 2.6.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Biosig Project provides an open-source library, libbiosig, designed for processing biosignal data. It is widely used in various applications that require the analysis of physiological signals. The package is available in Debian distributions, specifically versions 13 and 14. However, it has been identified to have a critical vulnerability that could allow attackers to execute arbitrary code through specially crafted files.
Vulnerability Detail
An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig version 2.5.0 and the Master Branch (commit ab0ee111). This vulnerability can be exploited by an attacker who provides a maliciously crafted .famos file, potentially leading to arbitrary code execution on the affected system. The vulnerability stems from improper handling of input data, allowing attackers to manipulate memory and execute unauthorized commands.
How To Fix
Minimum fixed version
2.6.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade biosigTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to avoid opening .famos files from untrusted sources until the package is updated to the fixed version. Additionally, implementing file validation checks before processing can help mitigate the risk.
Conclusion
The out-of-bounds write vulnerability in the biosig package poses a significant risk of arbitrary code execution through malicious .famos files. Users are strongly encouraged to update to the patched version to mitigate this risk and to follow recommended workarounds until the update can be applied.
See every vulnerability recorded for biosig →
FAQ
The vulnerability is an out-of-bounds write issue that can lead to arbitrary code execution when processing specially crafted .famos files.
The affected versions are biosig 2.5.0 and earlier, including the Master Branch up to commit ab0ee111.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, refrain from using .famos files from untrusted sources and consider implementing additional file validation checks.
Detailed information about the vulnerability can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-23606.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for biosig.
