Libsixel Heap Buffer Overflow and Denial of Service Vulnerabilities

Bugtraq ID:	106283
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-19763 CVE-2018-19762 CVE-2018-19761 CVE-2018-19757
Remote:	Yes
Local:	No
Published:	Nov 13 2018 12:00AM
Updated:	Nov 13 2018 12:00AM
Credit:	Shuitao Gan
Vulnerable:	Libsixel Libsixel 1.8.2
Not Vulnerable:

Libsixel Heap Buffer Overflow and Denial of Service Vulnerabilities

Libsixel is prone to multiple denial-of-service vulnerabilities and multiple heap-based buffer-overflow vulnerabilities.

An attacker can exploit these issues to cause a denial-of-service condition; denying service to legitimate users.

Libsixel 1.8.2 is vulnerable; other versions may also be affected.

Libsixel Heap Buffer Overflow and Denial of Service Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Libsixel Heap Buffer Overflow and Denial of Service Vulnerabilities

References:

• Libsixel Homepage (Libsixel)
  
• Bug 1649197 - There is an illegal address access at function (Redhat)
  
• Bug 1649199 - There is a heap-buffer-overflow at fromsixel.c:311 (Redhat)
  
• Bug 1649200 - There is an illegal address access at fromsixel.c:586 (Redhat)
  
• Bug 1649201 - There is a heap-buffer-overflow at writer.c:140 (Redhat)