SUSE update for giflib



Risk High
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2016-3977
CVE-2018-11490
CVE-2019-15133
CWE-ID CWE-122
CWE-369
Exploitation vector Network
Public exploit N/A
Vulnerable software
 SUSE Linux Enterprise Realtime Extension
Operating systems & Components / Operating system

SUSE Linux Enterprise Server
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Basesystem
Operating systems & Components / Operating system

SUSE Linux Enterprise Desktop
Operating systems & Components / Operating system

openSUSE Leap
Operating systems & Components / Operating system

SUSE Manager Server
Operating systems & Components / Operating system

SUSE Manager Proxy
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications
Operating systems & Components / Operating system

libgif7-32bit-debuginfo
Operating systems & Components / Operating system package or component

libgif7-32bit
Operating systems & Components / Operating system package or component

giflib-devel-32bit
Operating systems & Components / Operating system package or component

libgif7-debuginfo
Operating systems & Components / Operating system package or component

libgif7
Operating systems & Components / Operating system package or component

giflib-progs-debuginfo
Operating systems & Components / Operating system package or component

giflib-progs
Operating systems & Components / Operating system package or component

giflib-devel
Operating systems & Components / Operating system package or component

giflib-debugsource
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Heap-based buffer overflow

EUVDB-ID: #VU20920

Risk: High

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2016-3977

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the gif2rgb() function (util/gif2rgb.c) in giflib 5.1.2. A remote attacker can use background color index in a GIF file to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package giflib to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Realtime Extension: 15-SP2

SUSE Linux Enterprise Server: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise Module for Basesystem: 15-SP3 - 15-SP4

SUSE Linux Enterprise Desktop: 15-SP3 - 15-SP4

openSUSE Leap: 15.3 - 15.4

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3 - 15-SP4

libgif7-32bit-debuginfo: before 5.2.1-150000.4.8.1

libgif7-32bit: before 5.2.1-150000.4.8.1

giflib-devel-32bit: before 5.2.1-150000.4.8.1

libgif7-debuginfo: before 5.2.1-150000.4.8.1

libgif7: before 5.2.1-150000.4.8.1

giflib-progs-debuginfo: before 5.2.1-150000.4.8.1

giflib-progs: before 5.2.1-150000.4.8.1

giflib-devel: before 5.2.1-150000.4.8.1

giflib-debugsource: before 5.2.1-150000.4.8.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221565-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Heap-based buffer overflow

EUVDB-ID: #VU75499

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2018-11490

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the DGifDecompressLine function in dgif_lib.c in GIFLIB because a certain "Private->RunningCode - 2" array index is not checked. A remote attacker can trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package giflib to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Realtime Extension: 15-SP2

SUSE Linux Enterprise Server: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise Module for Basesystem: 15-SP3 - 15-SP4

SUSE Linux Enterprise Desktop: 15-SP3 - 15-SP4

openSUSE Leap: 15.3 - 15.4

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3 - 15-SP4

libgif7-32bit-debuginfo: before 5.2.1-150000.4.8.1

libgif7-32bit: before 5.2.1-150000.4.8.1

giflib-devel-32bit: before 5.2.1-150000.4.8.1

libgif7-debuginfo: before 5.2.1-150000.4.8.1

libgif7: before 5.2.1-150000.4.8.1

giflib-progs-debuginfo: before 5.2.1-150000.4.8.1

giflib-progs: before 5.2.1-150000.4.8.1

giflib-devel: before 5.2.1-150000.4.8.1

giflib-debugsource: before 5.2.1-150000.4.8.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221565-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Division by zero

EUVDB-ID: #VU30817

Risk: Medium

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2019-15133

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.

Mitigation

Update the affected package giflib to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Realtime Extension: 15-SP2

SUSE Linux Enterprise Server: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS - 15-SP4

SUSE Linux Enterprise Module for Basesystem: 15-SP3 - 15-SP4

SUSE Linux Enterprise Desktop: 15-SP3 - 15-SP4

openSUSE Leap: 15.3 - 15.4

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3 - 15-SP4

libgif7-32bit-debuginfo: before 5.2.1-150000.4.8.1

libgif7-32bit: before 5.2.1-150000.4.8.1

giflib-devel-32bit: before 5.2.1-150000.4.8.1

libgif7-debuginfo: before 5.2.1-150000.4.8.1

libgif7: before 5.2.1-150000.4.8.1

giflib-progs-debuginfo: before 5.2.1-150000.4.8.1

giflib-progs: before 5.2.1-150000.4.8.1

giflib-devel: before 5.2.1-150000.4.8.1

giflib-debugsource: before 5.2.1-150000.4.8.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221565-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###