Heap-based buffer overflow in stb_vorbis.c - CVE-2023-47212

Vulnerability identifier: #VU89160

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-47212

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the comment functionality. A remote attacker can use a specially crafted .ogg file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

stb_vorbis.c
Fedora
openEuler
stb
stb_perlin-devel
stb_hexwave-devel
stb_leakcheck-devel
stb_herringbone_wang_tile-devel
stb_c_lexer-devel
stb_tilemap_editor-devel
stb_ds-devel
stb_voxel_render-devel
stb_divide-devel
stb_connected_components-devel
stb_image_resize-devel
stb-devel
stb-help
stb_easy_font-devel
stb_rect_pack-devel
stb_sprintf-devel
stb_dxt-devel
stb_textedit-devel
stb_image_write-devel
stb_vorbis-devel
stb_truetype-devel
stb_image-devel

Install update from vendor's website.

stb - addressed in versions 0^20240213gitae721c5-5.el9, 0^20240213gitae721c5-5.fc38, 0^20240213gitae721c5-6.fc39, 0^20240213gitae721c5-6.fc40, 0-0.45.20240213gitae721c5.el7, 0-0.45.20240213gitae721c5.el8
stb_perlin-devel - update to 0.5.20220908git8b5f1f3-0.16
stb_hexwave-devel - update to 0.5.20220908git8b5f1f3-0.16
stb_leakcheck-devel - update to 0.6.20220908git8b5f1f3-0.16
stb_herringbone_wang_tile-devel - update to 0.7.20220908git8b5f1f3-0.16
stb_c_lexer-devel - update to 0.12.20220908git8b5f1f3-0.16
stb_tilemap_editor-devel - update to 0.42.20220908git8b5f1f3-0.16
stb_ds-devel - update to 0.67.20220908git8b5f1f3-0.16
stb_voxel_render-devel - update to 0.89.20220908git8b5f1f3-0.16
stb_divide-devel - update to 0.94.20220908git8b5f1f3-0.16
stb_connected_components-devel - update to 0.96.20220908git8b5f1f3-0.16
stb_image_resize-devel - update to 0.97.20220908git8b5f1f3-0.16
stb-devel - update to 0.20220908git8b5f1f3-0.16
stb-help - update to 0.20220908git8b5f1f3-0.16
stb - update to 0.20220908git8b5f1f3-0.16
stb_easy_font-devel - update to 1.1.20220908git8b5f1f3-0.16
stb_rect_pack-devel - update to 1.1.20220908git8b5f1f3-0.16
stb_sprintf-devel - update to 1.10.20220908git8b5f1f3-0.16
stb_dxt-devel - update to 1.12.20220908git8b5f1f3-0.16
stb_textedit-devel - update to 1.14.20220908git8b5f1f3-0.16
stb_image_write-devel - update to 1.16.20220908git8b5f1f3-0.16
stb_vorbis-devel - update to 1.22.20220908git8b5f1f3-0.16
stb_truetype-devel - update to 1.26.20220908git8b5f1f3-0.16
stb_image-devel - update to 2.27.20220908git8b5f1f3-0.16

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1846

• Multiple vulnerabilities in stb_vorbis.c
• Fedora 40 update for stb
• Fedora 39 update for stb
• Fedora 38 update for stb
• Fedora EPEL 9 update for stb
• Fedora EPEL 8 update for stb
• Fedora EPEL 7 update for stb
• openEuler 22.03 LTS SP3 update for stb