Bug 1098946 – VUL-1: CVE-2018-12648: exempi: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp inExempi 2.4.5 has a NULL pointer dereference.

Bug 1098946 - (CVE-2018-12648) VUL-1: CVE-2018-12648: exempi: The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp inExempi 2.4.5 has a NULL pointer dereference.

(CVE-2018-12648)
Summary:	VUL-1: CVE-2018-12648: exempi: The WEBP::GetLE32 function in XMPFiles/source/...

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P4 - Low Severity: Normal
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/208680/
Whiteboard:	CVSSv3:SUSE:CVE-2018-12648:3.3:(AV:L/...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2018-06-25 06:24 UTC by Marcus Meissner
Modified:	2019-06-27 14:40 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
1-poc-data-null-pointer (408 bytes, audio/x-riff) 2018-06-25 06:26 UTC, Marcus Meissner	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marcus Meissner 2018-06-25 06:24:25 UTC

CVE-2018-12648

The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in
Exempi 2.4.5 has a NULL pointer dereference.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-12648
http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-12648.html
https://bugs.freedesktop.org/show_bug.cgi?id=106981

Comment 1 Marcus Meissner 2018-06-25 06:26:41 UTC

Created attachment 775143 [details]
1-poc-data-null-pointer

QA REPRODUCER:

exempi -x -o out 1-poc-data-null-pointer

should not segfault

Comment 2 Marcus Meissner 2018-06-25 06:30:21 UTC

exempi 2.4 is affevcted (SLE15)
exempi 2.2 and older are not affected (do not have WEBP support)

Comment 5 Swamp Workflow Management 2019-06-21 13:39:43 UTC

SUSE-SU-2019:1603-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1098946
CVE References: CVE-2018-12648
Sources used:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (src):    exempi-2.4.5-3.3.2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src):    exempi-2.4.5-3.3.2
SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src):    exempi-2.4.5-3.3.2
SUSE Linux Enterprise Module for Desktop Applications 15 (src):    exempi-2.4.5-3.3.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 6 Swamp Workflow Management 2019-06-27 10:12:31 UTC

openSUSE-SU-2019:1657-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1098946
CVE References: CVE-2018-12648
Sources used:
openSUSE Leap 15.1 (src):    exempi-2.4.5-lp151.3.3.1

Comment 7 Marcus Meissner 2019-06-27 10:18:48 UTC

released

Comment 8 Swamp Workflow Management 2019-06-27 10:24:07 UTC

openSUSE-SU-2019:1649-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1098946
CVE References: CVE-2018-12648
Sources used:
openSUSE Leap 15.0 (src):    exempi-2.4.5-lp150.2.3.1