SUSE update for libgsf



Risk High
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2016-9888
CVE-2024-36474
CVE-2024-42415
CWE-ID CWE-476
CWE-190
Exploitation vector Network
Public exploit N/A
Vulnerable software
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 12 SP5 LTSS
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications 12
Operating systems & Components / Operating system

SUSE Linux Enterprise Server 12
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing 12
Operating systems & Components / Operating system

libgsf-1-114-32bit
Operating systems & Components / Operating system package or component

libgsf-1-114-debuginfo-32bit
Operating systems & Components / Operating system package or component

libgsf-lang
Operating systems & Components / Operating system package or component

libgsf-1-114
Operating systems & Components / Operating system package or component

libgsf-debugsource
Operating systems & Components / Operating system package or component

libgsf-1-114-debuginfo
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) NULL pointer dereference

EUVDB-ID: #VU32194

Risk: Medium

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-9888

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a crafted TAR file.

Mitigation

Update the affected package libgsf to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security: 12-SP5

SUSE Linux Enterprise Server 12 SP5 LTSS: 12-SP5

SUSE Linux Enterprise Server for SAP Applications 12: SP5

SUSE Linux Enterprise Server 12: SP5

SUSE Linux Enterprise High Performance Computing 12: SP5

libgsf-1-114-32bit: before 1.14.40-8.3.1

libgsf-1-114-debuginfo-32bit: before 1.14.40-8.3.1

libgsf-lang: before 1.14.40-8.3.1

libgsf-1-114: before 1.14.40-8.3.1

libgsf-debugsource: before 1.14.40-8.3.1

libgsf-1-114-debuginfo: before 1.14.40-8.3.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243770-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Integer overflow

EUVDB-ID: #VU98052

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-36474

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the Compound Document Binary File format parser. A remote attacker can trick the victim into opening a specially crafted file, trigger an an out-of-bounds index to be used when reading and writing to an array and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package libgsf to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security: 12-SP5

SUSE Linux Enterprise Server 12 SP5 LTSS: 12-SP5

SUSE Linux Enterprise Server for SAP Applications 12: SP5

SUSE Linux Enterprise Server 12: SP5

SUSE Linux Enterprise High Performance Computing 12: SP5

libgsf-1-114-32bit: before 1.14.40-8.3.1

libgsf-1-114-debuginfo-32bit: before 1.14.40-8.3.1

libgsf-lang: before 1.14.40-8.3.1

libgsf-1-114: before 1.14.40-8.3.1

libgsf-debugsource: before 1.14.40-8.3.1

libgsf-1-114-debuginfo: before 1.14.40-8.3.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243770-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Integer overflow

EUVDB-ID: #VU98051

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-42415

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the Compound Document Binary File format parser. A remote attacker can trick the victim into opening a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package libgsf to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security: 12-SP5

SUSE Linux Enterprise Server 12 SP5 LTSS: 12-SP5

SUSE Linux Enterprise Server for SAP Applications 12: SP5

SUSE Linux Enterprise Server 12: SP5

SUSE Linux Enterprise High Performance Computing 12: SP5

libgsf-1-114-32bit: before 1.14.40-8.3.1

libgsf-1-114-debuginfo-32bit: before 1.14.40-8.3.1

libgsf-lang: before 1.14.40-8.3.1

libgsf-1-114: before 1.14.40-8.3.1

libgsf-debugsource: before 1.14.40-8.3.1

libgsf-1-114-debuginfo: before 1.14.40-8.3.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2024/suse-su-20243770-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###