Описание
Security update for zbar
This update for zbar fixes the following issues:
- CVE-2023-40889: Fixed heap-based buffer overflow in the qr_reader_match_centers function (bsc#1214770).
- CVE-2023-40890: Fixed stack-based buffer overflow in the lookup_sequence function (bsc#1214771).
Список пакетов
SUSE Linux Enterprise Module for Desktop Applications 15 SP5
SUSE Linux Enterprise Module for Package Hub 15 SP5
SUSE Linux Enterprise Real Time 15 SP4
openSUSE Leap 15.4
openSUSE Leap 15.5
Ссылки
- Link for SUSE-SU-2023:4948-1
- E-Mail link for SUSE-SU-2023:4948-1
- SUSE Security Ratings
- SUSE Bug 1214770
- SUSE Bug 1214771
- SUSE CVE CVE-2023-40889 page
- SUSE CVE CVE-2023-40890 page
Описание
A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
Затронутые продукты
Ссылки
- CVE-2023-40889
- SUSE Bug 1214770
Описание
A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
Затронутые продукты
Ссылки
- CVE-2023-40890
- SUSE Bug 1214771