Bug 1195673 - (CVE-2021-40403) VUL-0: CVE-2021-40403: gerbv: pick-and-place rotation parsing use of uninitialized variable vulnerability
(CVE-2021-40403)
VUL-0: CVE-2021-40403: gerbv: pick-and-place rotation parsing use of uninitia...
Status: NEW
Classification: openSUSE
Product: openSUSE Distribution
Classification: openSUSE
Component: Security
Leap 15.4
Other Other
: P3 - Medium : Normal (vote)
: ---
Assigned To: Dmitry Roshchin
Security Team bot
https://smash.suse.de/issue/322793/
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-02-08 10:58 UTC by Carlos López
Modified: 2022-02-08 11:15 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos López 2022-02-08 10:58:21 UTC
rh#2051389

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd), and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker can provide a malicious file to trigger this vulnerability.

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1417

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2051389
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-40403
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40403
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1417
Comment 1 Carlos López 2022-02-08 11:01:26 UTC
Affected:
 - openSUSE:Backports:SLE-15-SP3
 - openSUSE:Backports:SLE-15-SP4
 - openSUSE:Factory

Looks like this will be the fix, but it has not been merged yet:
https://github.com/gerbv/gerbv/pull/85