Bug 924904 (CVE-2013-7437) - VUL-0: CVE-2013-7437: potrace: possible heap overflow
Summary: VUL-0: CVE-2013-7437: potrace: possible heap overflow
Status: RESOLVED FIXED
Alias: CVE-2013-7437
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other openSUSE 13.1
: P3 - Medium : Minor
Target Milestone: ---
Assignee: Stanislav Brabec
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/115307/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-03-30 11:13 UTC by Marcus Meissner
Modified: 2015-11-04 16:16 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2015-03-30 11:13:27 UTC 
rh#955808

Multiple integer overflows in potrace 1.11 allow remote attackers to cause a
denial of service (crash) via large dimensions in a BMP image, which triggers a
buffer overflow.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=955808
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-7437
http://www.openwall.com/lists/oss-security/2015/02/06/12
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778646
Comment 1 Swamp Workflow Management 2015-03-30 22:01:01 UTC 
bugbot adjusting priority
Comment 2 Stanislav Brabec 2015-04-02 18:18:17 UTC 
Upgrading for Factory and applying the patch in the Debian bug for released products. I just verified that it is equal to the fix, which is part of potrace-1.12.
Comment 3 Stanislav Brabec 2015-04-02 19:49:40 UTC 
Created maintenance request https://build.opensuse.org/request/show/294254 for openSUSE.

Did a version upgrade for Factory: https://build.opensuse.org/request/show/294238

Package does not exist in SLE.
Comment 4 Andreas Stieger 2015-04-03 20:04:05 UTC 
(In reply to Stanislav Brabec from comment #3)
> Created maintenance request https://build.opensuse.org/request/show/294254
> for openSUSE.

Thanks, handling the request and setting assignee back to security team. Upstream does not seem to have a source code repository anywhere?
Comment 5 Stanislav Brabec 2015-04-03 20:22:54 UTC 
I am not aware of any upstream repository. But the attached patch represents all code changes in the latest version (not counting generated files and copyright+version comments).
Comment 6 Andreas Stieger 2015-04-08 13:34:40 UTC 
releasing
Comment 7 Swamp Workflow Management 2015-04-08 14:07:36 UTC 
openSUSE-SU-2015:0685-1: An update that fixes one vulnerability is now available.

Category: security (low)
Bug References: 924904
CVE References: CVE-2013-7437
Sources used:
openSUSE 13.2 (src):    potrace-1.11-4.4.1
openSUSE 13.1 (src):    potrace-1.11-2.4.1
Comment 8 Swamp Workflow Management 2015-11-04 16:16:53 UTC 
openSUSE-SU-2015:1909-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 924904
CVE References: CVE-2013-7437
Sources used:
openSUSE Leap 42.1 (src):    potrace-1.13-5.1
openSUSE 13.2 (src):    potrace-1.13-4.7.1
openSUSE 13.1 (src):    potrace-1.13-2.7.1