[Bug 2118553] New: CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553

            Bug ID: 2118553
           Summary: CVE-2022-2831 blender: Integer Overflow in blender
                    thumbnail extractor
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: medium
          Priority: medium
          Assignee: security-response-team(a)redhat.com
          Reporter: saroy(a)redhat.com
                CC: code(a)musicinmybrain.net,
                    design-devel(a)lists.fedoraproject.org,
                    kwizart(a)gmail.com, luya_tfz(a)thefinalzone.net,
                    negativo17(a)gmail.com, promac(a)gmail.com
  Target Milestone: ---
    Classification: Other



source/blender/blendthumb/src/blendthumb_extract.cc
Integer Overflow can lead to Buffer overflow
https://developer.blender.org/T99705
https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2
https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553

Sandipan Roy <saroy(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends On|                            |2118555, 2118554





Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=2118554
[Bug 2118554] CVE-2022-2831 blender: Integer Overflow in blender thumbnail
extractor [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2118555
[Bug 2118555] CVE-2022-2831 blender: Integer Overflow in blender thumbnail
extractor [epel-7]
-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553



--- Comment #1 from Sandipan Roy <saroy(a)redhat.com&gt; ---
Created blender tracking bugs for this issue:

Affects: epel-7 [bug 2118555]
Affects: fedora-all [bug 2118554]


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553

Sandipan Roy <saroy(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |2117709




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553



--- Comment #2 from Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; ---
This CVE Bugzilla entry is for community support informational purposes only as
it does not affect a package in a commercially supported Red Hat product. Refer
to the dependent bugs for status of those individual community products.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553

Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |UPSTREAM
             Status|NEW                         |CLOSED
        Last Closed|                            |2022-09-01 15:35:08




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553

[Bug 2118553] CVE-2022-2831 blender: Integer Overflow in blender thumbnail extractor

https://bugzilla.redhat.com/show_bug.cgi?id=2118553
Bug 2118553 depends on bug 2118554, which changed state.

Bug 2118554 Summary: CVE-2022-2831 blender: Integer Overflow in blender thumbnail
extractor [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2118554

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |EOL




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2118553