Bug 1029638 – VUL-0: CVE-2017-6439: libplist: Heap-based buffer overflow in the parse_string_node function

Bug 1029638 - (CVE-2017-6439) VUL-0: CVE-2017-6439: libplist: Heap-based buffer overflow in the parse_string_node function

(CVE-2017-6439)
Summary:	VUL-0: CVE-2017-6439: libplist: Heap-based buffer overflow in the parse_strin...

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/181752/
Whiteboard:	CVSSv2:SUSE:CVE-2017-6439:1.9:(AV:L/A...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2017-03-16 07:36 UTC by Victor Pereira
Modified:	2020-09-16 11:01 UTC (History)
CC List:	3 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Victor Pereira 2017-03-16 07:36:13 UTC

CVE-2017-6439

Heap-based buffer overflow in the parse_string_node function in bplist.c in
libimobiledevice libplist 1.12 allows local users to cause a denial of service
(out-of-bounds write) via a crafted plist file.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6439
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6439
https://github.com/libimobiledevice/libplist/issues/95

Comment 2 Michael Gorse 2017-06-21 19:09:21 UTC

I'd forgotten about this bug. I incorporated this fix when fixing boo#1029631 for SLE12SP2/SLE12/Leap.

Comment 4 Swamp Workflow Management 2017-08-17 10:14:26 UTC

SUSE-SU-2017:2201-1: An update that fixes 5 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1029638,1029639,1029706,1029707,1029751
CVE References: CVE-2017-6435,CVE-2017-6436,CVE-2017-6437,CVE-2017-6438,CVE-2017-6439
Sources used:
SUSE Linux Enterprise Workstation Extension 12-SP3 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Workstation Extension 12-SP2 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Software Development Kit 12-SP3 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Software Development Kit 12-SP2 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Server 12-SP3 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Server 12-SP2 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Desktop 12-SP3 (src):    libplist-1.12-20.3.2
SUSE Linux Enterprise Desktop 12-SP2 (src):    libplist-1.12-20.3.2

Comment 5 Swamp Workflow Management 2017-08-18 01:09:27 UTC

openSUSE-SU-2017:2208-1: An update that fixes 5 vulnerabilities is now available.

Category: security (moderate)
Bug References: 1029638,1029639,1029706,1029707,1029751
CVE References: CVE-2017-6435,CVE-2017-6436,CVE-2017-6437,CVE-2017-6438,CVE-2017-6439
Sources used:
openSUSE Leap 42.3 (src):    libplist-1.12-11.1
openSUSE Leap 42.2 (src):    libplist-1.12-7.6.1

Comment 7 Marcus Meissner 2017-12-27 20:36:51 UTC

released