Bug 1215233 (CVE-2023-39070) - VUL-0: CVE-2023-39070: cppcheck: heap use-after-free in removeContradiction()
Summary: VUL-0: CVE-2023-39070: cppcheck: heap use-after-free in removeContradiction()
Status: NEW
Alias: CVE-2023-39070
Product: openSUSE Distribution
Classification: openSUSE
Component: Security (show other bugs)
Version: Leap 15.4
Hardware: Other Other
: P3 - Medium : Normal (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/377919/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-12 06:40 UTC by Carlos López
Modified: 2023-12-24 14:04 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---
dmueller: needinfo? (carlos.lopez)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos López 2023-09-12 06:40:12 UTC 
CVE-2023-39070

An issue in Cppcheck 2.12 dev leads to heap use-after-free in the removeContradiction() function in token.cpp when checking a specially crafted input.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39070
https://bugzilla.redhat.com/show_bug.cgi?id=2238464
https://www.cve.org/CVERecord?id=CVE-2023-39070
https://sourceforge.net/p/cppcheck/discussion/general/thread/fa43fb8ab1/
Comment 5 Dirk Mueller 2023-12-20 23:16:18 UTC 
fix accepted by upstream. still don't think it's worth a security update, but I submitted it for Backports SP5/SP6 and Tumbleweed.
Comment 6 OBSbugzilla Bot 2023-12-21 01:35:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1215233) was mentioned in
https://build.opensuse.org/request/show/1134347 Factory / cppcheck
https://build.opensuse.org/request/show/1134348 Backports:SLE-15-SP6 / cppcheck
https://build.opensuse.org/request/show/1134350 Backports:SLE-15-SP5 / cppcheck
Comment 7 Marcus Meissner 2023-12-24 14:04:51 UTC 
openSUSE-SU-2023:0413-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1215233
CVE References: CVE-2023-39070
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    cppcheck-2.12.1-bp155.2.3.1