An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2332 advisory.

  - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function     be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It     allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other     impact when a victim opens a specially crafted file. (CVE-2019-8379)

  - An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function     adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an     attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when     a victim opens a specially crafted file. (CVE-2019-8383)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5671-1 advisory.

  - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function     be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It     allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other     impact when a victim opens a specially crafted file. (CVE-2019-8379)

  - An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function     adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an     attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when     a victim opens a specially crafted file. (CVE-2019-8383)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2868 advisory.

  - An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled     processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by     tricking it into processing crafted ZIP files. (CVE-2018-1056)

  - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function     be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It     allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other     impact when a victim opens a specially crafted file. (CVE-2019-8379)

  - An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function     adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an     attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when     a victim opens a specially crafted file. (CVE-2019-8383)

  - In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an     invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is     also a heap-based buffer over-read.) (CVE-2019-9210)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has advancecomp packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function     adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an     attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when     a victim opens a specially crafted file. (CVE-2019-8383)

  - In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an     invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is     also a heap-based buffer over-read.) (CVE-2019-9210)

  - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function     be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It     allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other     impact when a victim opens a specially crafted file. (CVE-2019-8379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has advancecomp packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function     adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an     attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when     a victim opens a specially crafted file. (CVE-2019-8383)

  - In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an     invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is     also a heap-based buffer over-read.) (CVE-2019-9210)

  - An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function     be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It     allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other     impact when a victim opens a specially crafted file. (CVE-2019-8379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary.
It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.(CVE-2019-8379)

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.(CVE-2019-8383)

An update for advancecomp is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP files.

Security Fix(es) :

* advancecomp: NULL pointer dereference in function be_uint32_read() in endianrw.h (CVE-2019-8379)

* advancecomp: denial of service in function adv_png_unfilter_8 in lib/png.c (CVE-2019-8383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Security Fix(es) :

  - advancecomp: NULL pointer dereference in function     be_uint32_read() in endianrw.h (CVE-2019-8379)

  - advancecomp: denial of service in function     adv_png_unfilter_8 in lib/png.c (CVE-2019-8383)

ID	Name	Product	Family	Severity
180843	Oracle Linux 7 : advancecomp (ELSA-2019-2332)	Nessus	Oracle Linux Local Security Checks	high
166089	Ubuntu 16.04 ESM / 18.04 LTS : AdvanceCOMP vulnerabilities (USN-5671-1)	Nessus	Ubuntu Local Security Checks	high
156394	Debian DLA-2868-1 : advancecomp - LTS security update	Nessus	Debian Local Security Checks	high
143951	NewStart CGSL CORE 5.05 / MAIN 5.05 : advancecomp Multiple Vulnerabilities (NS-SA-2020-0101)	Nessus	NewStart CGSL Local Security Checks	high
143944	NewStart CGSL CORE 5.04 / MAIN 5.04 : advancecomp Multiple Vulnerabilities (NS-SA-2020-0069)	Nessus	NewStart CGSL Local Security Checks	high
130224	Amazon Linux 2 : mercurial (ALAS-2019-1328)	Nessus	Amazon Linux Local Security Checks	high
130216	Amazon Linux 2 : advancecomp (ALAS-2019-1319)	Nessus	Amazon Linux Local Security Checks	high
128391	CentOS 7 : advancecomp (CESA-2019:2332)	Nessus	CentOS Local Security Checks	high
128207	Scientific Linux Security Update : advancecomp on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	high
127713	RHEL 7 : advancecomp (RHSA-2019:2332)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2019-8383

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high