An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ff08c2b41a advisory.

    Fixes for memory vulnerabilities.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3921-1 advisory.

    - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282,     bsc#1231283).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3922-1 advisory.

    - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282,     bsc#1231283).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3920-1 advisory.

    - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282,     bsc#1231283).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libgsf installed on the remote host is prior to 1.14.26-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2681 advisory.

    An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME     Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an     integer overflow when processing the directory from the file that allows for an out-of-bounds index to be     used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can     provide a malicious file to trigger this vulnerability. (CVE-2024-36474)

    An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of     the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer     overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This     can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this     vulnerability. (CVE-2024-42415)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3770-1 advisory.

    - CVE-2016-9888: Fixed null pointer dereference with corrupted tar files (bsc#1014609)
    - CVE-2024-36474: Fixed out-of-bounds index when processing a directory via an integer overflow in the     compound document binary file format parser (bsc#1231282)
    - CVE-2024-42415: Fixed heap-based buffer overflow when processing the sector allocation table via an     integer overflow in the compound document binary file format parser (bsc#1231283)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7062-2 advisory.

    USN-7062-1 fixed vulnerabilities in libgsf. This update provides the corresponding updates for Ubuntu     24.10.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7d06f67cf5 advisory.

    Fixes for memory vulnerabilities.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2ac7273bab advisory.

    Fixes for memory vulnerabilities.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7062-1 advisory.

    It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or     automated system were tricked into opening a specially crafted file, a remote attacker could possibly use     this issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3911 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3911-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     October 07, 2024                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libgsf     Version        : 1.14.47-1+deb11u1     CVE ID         : CVE-2024-36474 CVE-2024-42415     Debian Bug     : 1084056

    Integer overflos have been fixed in libgsf,     the GNOME Project G Structured File Library.

    CVE-2024-36474

        directory integer overflow

    CVE-2024-42415

        sector allocation table integer overflow

    For Debian 11 bullseye, these problems have been fixed in version     1.14.47-1+deb11u1.

    We recommend that you upgrade your libgsf packages.

    For the detailed security status of libgsf please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libgsf

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5786 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5786-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     October 05, 2024                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libgsf     CVE ID         : CVE-2024-36474 CVE-2024-42415     Debian Bug     : 1084056

    Integer overflows flaws were discovered in the Compound Document Binary     File format parser of libgsf, the GNOME Project G Structured File     Library, which could result in the execution of arbitrary code if a     specially crafted file is processed.

    For the stable distribution (bookworm), these problems have been fixed in     version 1.14.50-1+deb12u1.

    We recommend that you upgrade your libgsf packages.

    For the detailed security status of libgsf please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/libgsf

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211102	Fedora 41 : libgsf (2024-ff08c2b41a)	Nessus	Fedora Local Security Checks	high
210470	SUSE SLES15 Security Update : libgsf (SUSE-SU-2024:3921-1)	Nessus	SuSE Local Security Checks	high
210468	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgsf (SUSE-SU-2024:3922-1)	Nessus	SuSE Local Security Checks	high
210467	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgsf (SUSE-SU-2024:3920-1)	Nessus	SuSE Local Security Checks	high
210095	Amazon Linux 2 : libgsf (ALAS-2024-2681)	Nessus	Amazon Linux Local Security Checks	high
209948	SUSE SLES12 Security Update : libgsf (SUSE-SU-2024:3770-1)	Nessus	SuSE Local Security Checks	high
209440	Ubuntu 24.10 : libgsf vulnerabilities (USN-7062-2)	Nessus	Ubuntu Local Security Checks	high
208934	Fedora 39 : libgsf (2024-7d06f67cf5)	Nessus	Fedora Local Security Checks	high
208933	Fedora 40 : libgsf (2024-2ac7273bab)	Nessus	Fedora Local Security Checks	high
208701	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : libgsf vulnerabilities (USN-7062-1)	Nessus	Ubuntu Local Security Checks	high
208225	Debian dla-3911 : gir1.2-gsf-1 - security update	Nessus	Debian Local Security Checks	high
208216	Debian dsa-5786 : gir1.2-gsf-1 - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2024-42415

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high