SUSE update for libEMF

1) Integer overflow

EUVDB-ID: #VU67136

Risk: High

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-13999

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow within the ScaleViewPortExtEx() function in libemf.cpp when processing EMF files. A remote attacker can pass specially crafted EMF file to the application, trigger an integer overflow and crash the application.

Mitigation

Update the affected package libEMF to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Workstation Extension: 15-SP3

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

libEMF1-debuginfo: before 1.0.7-150000.3.6.1

libEMF1: before 1.0.7-150000.3.6.1

libEMF-utils-debuginfo: before 1.0.7-150000.3.6.1

libEMF-utils: before 1.0.7-150000.3.6.1

libEMF-devel: before 1.0.7-150000.3.6.1

libEMF-debugsource: before 1.0.7-150000.3.6.1

libEMF-debuginfo: before 1.0.7-150000.3.6.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_workstation_extension:15-SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:15-SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:15-SP3:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server:15-SP3:*:*:*:*:*:*:

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20223191-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.