Bug 1403198 – CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1403198 - (CVE-2016-9888) CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()

Summary:	CVE-2016-9888 libgsf: Null pointer dereference in tar_directory_for_file()

Status:	CLOSED ERRATA

Aliases:	CVE-2016-9888

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=low,public=20161207,reported=2...
Keywords:	Security

Depends On:	1403199 1403200
Blocks:
	Show dependency tree / graph

Reported:	2016-12-09 07:09 EST by Andrej Nemec
Modified:	2017-04-18 03:17 EDT (History)
CC List:	2 users (show)

See Also:
Fixed In Version:	libgsf 1.14.41
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-04-13 00:30:38 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Andrej Nemec 2016-12-09 07:09:05 EST

An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file.

Upstream patch:

https://github.com/GNOME/libgsf/commit/95a8351a75758cf10b3bf6abae0b6b461f90d9e5

References:

https://secunia.com/secunia_research/2016-17/

Comment 1 Andrej Nemec 2016-12-09 07:09:59 EST

Created libgsf tracking bugs for this issue:

Affects: fedora-all [bug 1403199]

Comment 2 Andrej Nemec 2016-12-09 07:10:06 EST

Created mingw-libgsf tracking bugs for this issue:

Affects: fedora-all [bug 1403200]

Comment 3 greg.hellings 2017-04-13 00:30:38 EDT

Closing, as all sub-bugs are resolved already.

Note You need to log in before you can comment on or make changes to this bug.