Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 918556 (CVE-2021-32420, CVE-2021-32421, CVE-2021-32422, CVE-2021-33388, CVE-2021-33390) - media-gfx/dpic: multiple vulnerabilities
Summary: media-gfx/dpic: multiple vulnerabilities
Status: CONFIRMED
Alias: CVE-2021-32420, CVE-2021-32421, CVE-2021-32422, CVE-2021-33388, CVE-2021-33390
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B2 [ebuild]
Keywords:
Depends on:
Blocks:
 
Reported: 2023-11-25 20:15 UTC by John Helmert III
Modified: 2023-11-25 20:15 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-25 20:15:36 UTC 
CVE-2021-32420 (https://gitlab.com/aplevich/dpic/-/issues/5):
https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.

CVE-2021-32421 (https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf):
https://gitlab.com/aplevich/dpic/-/issues/7

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.

CVE-2021-32422 (https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf):
https://gitlab.com/aplevich/dpic/-/issues/6

dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.

CVE-2021-33388 (https://gitlab.com/aplevich/dpic/-/issues/8):

dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y

CVE-2021-33390 (https://gitlab.com/aplevich/dpic/-/issues/10):

dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.

All issues closed, but I'm not certain they're all fixed without
references to fixes.