Out-of-bounds read in GIFLIB - CVE-2023-48161

Vulnerability identifier: #VU87208

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-48161

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the DumpSCreen2RGB() function in gif2rgb.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

GIFLIB
PowerStore 9000X
PowerStore 7000X
PowerStore 1000X
PowerStore 3000X
PowerStore 5000X
PowerStoreX OS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
openSUSE Leap
openEuler
IBM Cloud Transformation Advisor
Cryostat
IBM Cloud Pak for Security
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Session Smart Router
IBM Cloud Pak for Business Automation
OpenJDK Java (for Middleware)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
java-1.8.0-openjdk-accessibility
java-1.8.0-openjdk-devel
java-1.8.0-openjdk-devel-debug
java-1.8.0-openjdk-headless
java-1.8.0-openjdk-headless-debug
java-1.8.0-openjdk-src
java-1.8.0-openjdk-src-debug
java-1.8.0-openjdk-javadoc
java-1.8.0-openjdk-javadoc-debug
java-1.8.0-openjdk-javadoc-zip
java-1.8.0-openjdk-javadoc-zip-debug
java-1.8.0-openjdk-demo-debug
java-1.8.0-openjdk-demo
java-1.8.0-openjdk-debug
java-1.8.0-openjdk-accessibility-debug
java-1.8.0-openjdk
java-1.8.0-openjdk (Red Hat package)
giflib-help
giflib
giflib-devel
giflib-utils
giflib-debuginfo
giflib-debugsource
giflib-devel-32bit
libgif7-debuginfo
libgif7
giflib-progs
giflib-progs-debuginfo
libgif7-32bit
libgif7-32bit-debuginfo
java-11-openjdk (Red Hat package)
java-11-openjdk-javadoc
java-11-openjdk
java-11-openjdk-debug
java-11-openjdk-demo
java-11-openjdk-demo-debug
java-11-openjdk-devel
java-11-openjdk-devel-debug
java-11-openjdk-headless
java-11-openjdk-headless-debug
java-11-openjdk-javadoc-zip-debug
java-11-openjdk-javadoc-debug
java-11-openjdk-jmods
java-11-openjdk-javadoc-zip
java-11-openjdk-static-libs-debug
java-11-openjdk-static-libs
java-11-openjdk-src-debug
java-11-openjdk-src
java-11-openjdk-jmods-debug
java-17-openjdk (Red Hat package)
java-17-openjdk-devel
java-17-openjdk-headless
java-17-openjdk-demo
java-17-openjdk-javadoc
java-17-openjdk-javadoc-zip
java-17-openjdk
java-17-openjdk-static-libs
java-17-openjdk-src
java-17-openjdk-jmods
java-21-openjdk (Red Hat package)
Juniper Junos Space
PowerStore T
EMC Cloud Tiering Appliance
Business Automation Insights

Install updates from vendor's website.

GIFLIB - update to 5.2.2
IBM Cloud Transformation Advisor - update to 3.10.2
OpenJDK Java (for Middleware) - addressed in versions 8.0.432, 11.0.25, 17.0.13, 21.0.5
Juniper Junos Space - update to 24.1R3
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-devel-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-headless-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-src - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-src-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-javadoc-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-javadoc-zip-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-demo-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-accessibility-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk (Red Hat package) - addressed in versions 1.8.0.432.b06-1.el7_9, 1.8.0.432.b06-1.el8_2, 1.8.0.432.b06-1.el8_4, 1.8.0.432.b06-1.el8_6, 1.8.0.432.b06-1.el9_0, 1.8.0.432.b06-2.el8, 1.8.0.432.b06-2.el9
IBM Cloud Pak for Security - update to 1.11.0.0
PowerStoreX OS - update to 3.2.1.5-2424458
PowerStore T - update to 3.6.1.4-2413340
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
App Connect Enterprise Certified Container - addressed in versions 5.0.18, 11.6.0
giflib-help - update to 5.2.2-1
giflib - update to 5.2.2-1
giflib-devel - update to 5.2.2-1
giflib-utils - update to 5.2.2-1
giflib - update to 5.2.2-1
giflib-debuginfo - update to 5.2.2-1
giflib-devel - update to 5.2.2-1
giflib-debugsource - update to 5.2.2-1
giflib-utils - update to 5.2.2-1
giflib-devel-32bit - update to 5.2.2-150000.4.13.1
libgif7-debuginfo - update to 5.2.2-150000.4.13.1
libgif7 - update to 5.2.2-150000.4.13.1
giflib-progs - update to 5.2.2-150000.4.13.1
giflib-progs-debuginfo - update to 5.2.2-150000.4.13.1
giflib-devel - update to 5.2.2-150000.4.13.1
libgif7-32bit - update to 5.2.2-150000.4.13.1
libgif7-32bit-debuginfo - update to 5.2.2-150000.4.13.1
giflib-debugsource - update to 5.2.2-150000.4.13.1
Session Smart Router - addressed in versions 6.2.10, 6.3.7
java-11-openjdk (Red Hat package) - addressed in versions 11.0.25.0.9-1.el7_9, 11.0.25.0.9-1.el8_2, 11.0.25.0.9-1.el8_4, 11.0.25.0.9-1.el8_6, 11.0.25.0.9-1.el9_0, 11.0.25.0.9-2.el8, 11.0.25.0.9-2.el9
java-11-openjdk-javadoc - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-demo - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-demo-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-devel - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-devel-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-headless - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-headless-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc-zip-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-jmods - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-javadoc-zip - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-static-libs-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-static-libs - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-src-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-src - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-jmods-debug - update to 11.0.25.0.9-1.0.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.29
java-17-openjdk (Red Hat package) - addressed in versions 17.0.13.0.11-1.el8_4, 17.0.13.0.11-1.el8_6, 17.0.13.0.11-1.el9_0, 17.0.13.0.11-3.el8, 17.0.13.0.11-3.el9
java-17-openjdk-devel - update to 17.0.13.0.11-3.0.2
java-17-openjdk-headless - update to 17.0.13.0.11-3.0.2
java-17-openjdk-demo - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc-zip - update to 17.0.13.0.11-3.0.2
java-17-openjdk - update to 17.0.13.0.11-3.0.2
java-17-openjdk-static-libs - update to 17.0.13.0.11-3.0.2
java-17-openjdk-src - update to 17.0.13.0.11-3.0.2
java-17-openjdk-jmods - update to 17.0.13.0.11-3.0.2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
java-21-openjdk (Red Hat package) - addressed in versions 21.0.5.0.10-3.el8, 21.0.5.0.10-3.el9
Business Automation Insights - addressed in versions 24.0.0.0.2, 24.0.1.0.1

• https://sourceforge.net/p/giflib/bugs/167/
• https://github.com/tacetool/TACE#cve-2023-48161

• Multiple vulnerabilities in giflib
• SUSE update for giflib
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• openEuler update for giflib
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for java-11-openjdk
• Red Hat Enterprise Linux update for Java 11
• Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9 update for java-21-openjdk
• Red Hat Enterprise Linux 9 update for java-17-openjdk
• Multiple vulnerabilities in Red Hat OpenJDK 8
• Multiple vulnerabilities in Red Hat OpenJDK 11
• Multiple vulnerabilities in Red Hat OpenJDK 17
• Multiple vulnerabilities in Red Hat OpenJDK 21
• Red Hat Enterprise Linux update for java-1.8.0-openjdk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for java-1.8.0-openjdk
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in Dell PowerStore T
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Business Automation Insights
• Anolis OS update for giflib
• Anolis OS update for java-17-openjdk
• Anolis OS update for java-1.8.0-openjdk
• Anolis OS update for java-11-openjdk
• Anolis OS update for java-11-openjdk
• Anolis OS update for java-1.8.0-openjdk
• Junos Space update for third-party components
• Multiple vulnerabilities in Dell PowerStore X
• Juniper Session Smart Router update for third-party components