Integer overflow in Zchunk - CVE-2023-46228

Vulnerability identifier: #VU82977

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-46228

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when processing files in lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, and lib/header.c. A remote attacker can pass specially crafted file to the application, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Zchunk
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
zchunk
libzck1-debuginfo
libzck-devel
libzck1
zchunk-debugsource
zchunk-debuginfo
PowerStore T
Dell EMC PowerStore Family Operating System
Dell EMC VxRail Appliance

Install updates from vendor's website.

Zchunk - update to 1.3.2
zchunk - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
libzck1-debuginfo - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
libzck-devel - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
libzck1 - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
zchunk-debugsource - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
zchunk-debuginfo - addressed in versions 1.1.5-150200.3.5.1, 1.1.16-150400.3.7.1
PowerStore T - update to 3.6.1.2-2315284
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
Dell EMC VxRail Appliance - update to 8.0.201

• https://bugzilla.suse.com/show_bug.cgi?id=1216268
• https://github.com/zchunk/zchunk/commit/08aec2b4dfd7f709b6e3d511411ffcc83ed4efbe
• https://github.com/zchunk/zchunk/compare/1.3.1...1.3.2

• Remote code execution in zchunk
• SUSE update for zchunk
• SUSE update for zchunk
• Multiple vulnerabilities in Dell PowerStore Family
• Multiple vulnerabilities in Dell PowerStoreT OS
• Multiple vulnerabilities in Dell EMC VxRail Appliance