Security update for libyajl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1746-1 Final 1 1 2022-06-14T09:52:52Z current 2022-06-14T09:52:52Z 2022-06-14T09:52:52Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libyajl This update for libyajl fixes the following issue: - CVE-2022-24795: Fixed a heap-based buffer overflow when handling large inputs due to an integer overflow (bsc#1198405) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-1746,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-1746,Image SLES12-SP5-Azure-SAP-BYOS-2022-1746,Image SLES12-SP5-Azure-SAP-On-Demand-2022-1746,Image SLES12-SP5-EC2-BYOS-2022-1746,Image SLES12-SP5-EC2-ECS-On-Demand-2022-1746,Image SLES12-SP5-EC2-On-Demand-2022-1746,Image SLES12-SP5-EC2-SAP-BYOS-2022-1746,Image SLES12-SP5-EC2-SAP-On-Demand-2022-1746,Image SLES12-SP5-GCE-SAP-BYOS-2022-1746,Image SLES12-SP5-GCE-SAP-On-Demand-2022-1746,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-1746,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-1746,SUSE-2022-1746,SUSE-SLE-SDK-12-SP5-2022-1746,SUSE-SLE-SERVER-12-SP5-2022-1746 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221746-1/ Link for SUSE-SU-2022:1746-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/011095.html E-Mail link for SUSE-SU-2022:1746-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1198405 SUSE Bug 1198405 https://www.suse.com/security/cve/CVE-2022-24795/ SUSE CVE CVE-2022-24795 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libyajl2-2.0.1-18.7.1 libyajl-devel-2.0.1-18.7.1 libyajl-devel-32bit-2.0.1-18.7.1 libyajl-devel-64bit-2.0.1-18.7.1 libyajl-devel-static-2.0.1-18.7.1 libyajl2-32bit-2.0.1-18.7.1 libyajl2-64bit-2.0.1-18.7.1 yajl-2.0.1-18.7.1 libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-EC2-BYOS libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-EC2-On-Demand libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libyajl2-2.0.1-18.7.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libyajl2-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 libyajl2-32bit-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Server 12 SP5 libyajl2-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libyajl2-32bit-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libyajl-devel-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libyajl-devel-static-2.0.1-18.7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf->alloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL. CVE-2022-24795 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libyajl2-2.0.1-18.7.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-Azure-SAP-BYOS:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-Azure-SAP-On-Demand:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-EC2-BYOS:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-EC2-ECS-On-Demand:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-EC2-On-Demand:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-EC2-SAP-BYOS:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-EC2-SAP-On-Demand:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-GCE-SAP-BYOS:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-GCE-SAP-On-Demand:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libyajl2-2.0.1-18.7.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libyajl2-2.0.1-18.7.1 SUSE Linux Enterprise Server 12 SP5:libyajl2-2.0.1-18.7.1 SUSE Linux Enterprise Server 12 SP5:libyajl2-32bit-2.0.1-18.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libyajl2-2.0.1-18.7.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libyajl2-32bit-2.0.1-18.7.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libyajl-devel-2.0.1-18.7.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libyajl-devel-static-2.0.1-18.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221746-1/ https://www.suse.com/security/cve/CVE-2022-24795.html CVE-2022-24795 https://bugzilla.suse.com/1198405 SUSE Bug 1198405