boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.

This boost update fixes a UTF validation problem.

  - Apply boost-locale_utf.patch to fix a vulnerability in     the utf handling of boost:locale (bnc#801991,     CVE-2013-0252)

Updated boost packages fix security vulnerability :

A security flaw was found in the way ordered_malloc() routine implementation in Boost, the free peer-reviewed portable C++ source libraries, performed 'next-size' and 'max_size' parameters sanitization, when allocating memory. If an application, using the Boost C++ source libraries for memory allocation, was missing application-level checks for safety of 'next_size' and 'max_size' values, a remote attacker could provide a specially crafted application-specific file (requiring runtime memory allocation it to be processed correctly) that, when opened would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application (CVE-2012-2677).

Boost.Locale library in Boost 1.48 to 1.52 including has a security flaw (CVE-2013-0252): boost::locale::utf::utf_traits accepted some invalid UTF-8 sequences. Applications that used these functions for UTF-8 input validation could expose themselves to security threats as invalid UTF-8 sequece would be considered as valid.

The package has been patched to fix above security flaw.

This update fixes classifying incomplete UTF-8 sequences in Boost.Locale.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the Boost.Locale library incorrectly validated some invalid UTF-8 sequences. An attacker could possibly use this issue to bypass input validation in certain applications.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75153	openSUSE Security Update : boost (openSUSE-SU-2013:1523-1)	Nessus	SuSE Local Security Checks	medium
66079	Mandriva Linux Security Advisory : boost (MDVSA-2013:065)	Nessus	Mandriva Local Security Checks	medium
64856	Fedora 18 : boost-1.50.0-5.fc18 (2013-2448)	Nessus	Fedora Local Security Checks	medium
64854	Fedora 17 : boost-1.48.0-14.fc17 (2013-2420)	Nessus	Fedora Local Security Checks	medium
64680	Ubuntu 12.10 : boost1.49 vulnerability (USN-1727-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2013-0252

high

Tenable Plugins

medium

medium

medium

medium

medium