Bug 1094832 (CVE-2018-11490) - VUL-0: CVE-2018-11490: giflib: The DGifDecompressLine function in dgif_lib.c has a heap-based buffer overflow because "Private->RunningCode - 2" array index is unchecked
Summary: VUL-0: CVE-2018-11490: giflib: The DGifDecompressLine function in dgif_lib.c ...
Status: RESOLVED FIXED
Alias: CVE-2018-11490
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P2 - High : Major
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/206549/
Whiteboard: CVSSv3.1:SUSE:CVE-2018-11490:8.8:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-28 08:30 UTC by Johannes Segitz
Modified: 2024-05-16 13:57 UTC (History)
6 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2018-05-28 08:30:25 UTC 
CVE-2018-11490

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version
3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer
overflow because a certain "Private->RunningCode - 2" array index is not
checked. This will lead to a denial of service or possibly unspecified other
impact.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11490
https://github.com/pts/sam2p/issues/38
Comment 2 Swamp Workflow Management 2022-05-06 19:17:23 UTC 
SUSE-SU-2022:1565-1: An update that solves three vulnerabilities and has one errata is now available.

Category: security (moderate)
Bug References: 1094832,1146299,1184123,974847
CVE References: CVE-2016-3977,CVE-2018-11490,CVE-2019-15133
JIRA References: 
Sources used:
openSUSE Leap 15.4 (src):    giflib-5.2.1-150000.4.8.1
openSUSE Leap 15.3 (src):    giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Realtime Extension 15-SP2 (src):    giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Module for Basesystem 15-SP4 (src):    giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Module for Basesystem 15-SP3 (src):    giflib-5.2.1-150000.4.8.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 4 Maintenance Automation 2023-04-24 20:30:04 UTC 
SUSE-SU-2023:1970-2: An update that solves three vulnerabilities and has one fix can now be installed.

Category: security (important)
Bug References: 1094832, 1146299, 1184123, 974847
CVE References: CVE-2016-3977, CVE-2018-11490, CVE-2019-15133
Sources used:
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (src): giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src): giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (src): giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src): giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1 (src): giflib-5.2.1-150000.4.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src): giflib-5.2.1-150000.4.8.1
SUSE Enterprise Storage 7 (src): giflib-5.2.1-150000.4.8.1
SUSE CaaS Platform 4.0 (src): giflib-5.2.1-150000.4.8.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 8 Fridrich Strba 2024-03-25 14:24:48 UTC 
Hello, I am reassigning to security. Please advise, whether backporting to SLE12 and SLE11 warrants the rather considerable amount of work.
Comment 11 Camila Camargo de Matos 2024-05-09 12:18:08 UTC 
The patch for this issue seems to be available at: https://sourceforge.net/p/giflib/code/ci/08438a5098f3bb1de23a29334af55eba663f75bd/
Comment 12 Fridrich Strba 2024-05-10 10:09:19 UTC 
https://build.suse.de/request/show/329797
Comment 13 Maintenance Automation 2024-05-13 12:30:05 UTC 
SUSE-SU-2024:1622-1: An update that solves two vulnerabilities can now be installed.

Category: security (important)
Bug References: 1094832, 1200551
CVE References: CVE-2018-11490, CVE-2021-40633
Maintenance Incident: [SUSE:Maintenance:33803](https://smelt.suse.de/incident/33803/)
Sources used:
SUSE Linux Enterprise Software Development Kit 12 SP5 (src):
 giflib-5.0.5-13.3.1
SUSE Linux Enterprise High Performance Computing 12 SP5 (src):
 giflib-5.0.5-13.3.1
SUSE Linux Enterprise Server 12 SP5 (src):
 giflib-5.0.5-13.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5 (src):
 giflib-5.0.5-13.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 14 Fridrich Strba 2024-05-13 12:44:05 UTC 
reassigning to security for closing