fig2dev CVE-2018-16140 Security Bypass Vulnerability

Bugtraq ID:	108108
Class:	Boundary Condition Error
CVE:	CVE-2018-16140
Remote:	Yes
Local:	No
Published:	Aug 29 2018 12:00AM
Updated:	Aug 29 2018 12:00AM
Credit:	Unknown
Vulnerable:	Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Redhat Enterprise Linux 5 fig2dev Project fig2dev 3.2.7a
Not Vulnerable:

fig2dev CVE-2018-16140 Security Bypass Vulnerability

fig2dev is prone to a security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information, bypass certain security restrictions and perform unauthorized actions.

fig2dev version 3.2.7a is vulnerable; other versions may also be affected.

fig2dev CVE-2018-16140 Security Bypass Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

fig2dev CVE-2018-16140 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

fig2dev CVE-2018-16140 Security Bypass Vulnerability

References:

• #28 fig2dev: buffer underwrite in get_line() in version 3.2.7a (sourceforge.net)
  
• Xfig Homepage (sourceforge.net)
  
• Bug 1627974 (CVE-2018-16140) - CVE-2018-16140 transfig: Buffer underwrite in re (Redhat)
  
• USN-3760-1: transfig vulnerability (Ubuntu)
  
• CVE-2018-16140 (Redhat)