Integer overflow in stb_vorbis.c - CVE-2023-45681

Vulnerability identifier: #VU89169

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-45681

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

stb_vorbis.c
Fedora
openEuler
stb
stb_perlin-devel
stb_hexwave-devel
stb_leakcheck-devel
stb_herringbone_wang_tile-devel
stb_c_lexer-devel
stb_tilemap_editor-devel
stb_ds-devel
stb_voxel_render-devel
stb_divide-devel
stb_connected_components-devel
stb_image_resize-devel
stb-help
stb-devel
stb_easy_font-devel
stb_rect_pack-devel
stb_sprintf-devel
stb_dxt-devel
stb_textedit-devel
stb_image_write-devel
stb_vorbis-devel
stb_truetype-devel
stb_image-devel
libxmp

Install update from vendor's website.

stb - addressed in versions 0^20240213gitae721c5-5.el9, 0^20240213gitae721c5-5.fc38, 0^20240213gitae721c5-6.fc39, 0^20240213gitae721c5-6.fc40, 0-0.45.20240213gitae721c5.el7, 0-0.45.20240213gitae721c5.el8
stb_perlin-devel - update to 0.5.20220908git8b5f1f3-0.16
stb_hexwave-devel - update to 0.5.20220908git8b5f1f3-0.16
stb_leakcheck-devel - update to 0.6.20220908git8b5f1f3-0.16
stb_herringbone_wang_tile-devel - update to 0.7.20220908git8b5f1f3-0.16
stb_c_lexer-devel - update to 0.12.20220908git8b5f1f3-0.16
stb_tilemap_editor-devel - update to 0.42.20220908git8b5f1f3-0.16
stb_ds-devel - update to 0.67.20220908git8b5f1f3-0.16
stb_voxel_render-devel - update to 0.89.20220908git8b5f1f3-0.16
stb_divide-devel - update to 0.94.20220908git8b5f1f3-0.16
stb_connected_components-devel - update to 0.96.20220908git8b5f1f3-0.16
stb_image_resize-devel - update to 0.97.20220908git8b5f1f3-0.16
stb-help - update to 0.20220908git8b5f1f3-0.16
stb-devel - update to 0.20220908git8b5f1f3-0.16
stb - update to 0.20220908git8b5f1f3-0.16
stb_easy_font-devel - update to 1.1.20220908git8b5f1f3-0.16
stb_rect_pack-devel - update to 1.1.20220908git8b5f1f3-0.16
stb_sprintf-devel - update to 1.10.20220908git8b5f1f3-0.16
stb_dxt-devel - update to 1.12.20220908git8b5f1f3-0.16
stb_textedit-devel - update to 1.14.20220908git8b5f1f3-0.16
stb_image_write-devel - update to 1.16.20220908git8b5f1f3-0.16
stb_vorbis-devel - update to 1.22.20220908git8b5f1f3-0.16
stb_truetype-devel - update to 1.26.20220908git8b5f1f3-0.16
stb_image-devel - update to 2.27.20220908git8b5f1f3-0.16
libxmp - addressed in versions 4.6.1-2.fc40, 4.6.1-2.fc41

• https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3660-L3677
• https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/

• Multiple vulnerabilities in stb_vorbis.c
• Fedora 40 update for stb
• Fedora 39 update for stb
• Fedora 38 update for stb
• Fedora EPEL 9 update for stb
• Fedora EPEL 8 update for stb
• Fedora EPEL 7 update for stb
• openEuler 22.03 LTS SP3 update for stb
• Fedora 40 update for libxmp
• Fedora 41 update for libxmp