OESA-2024-1155

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1155
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1155.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-1155
Upstream
Published
2024-02-08T11:06:57Z
Modified
2025-08-12T05:22:07.775843Z
Summary
zbar security update
Details

ZBar is an open source software suite for reading bar codes from various sources, such as video streams, image files and raw intensity sensors. It supports many popular symbologies (types of bar codes) including EAN-13/UPC-A, UPC-E, EAN-8, Code 128, Code 39, Interleaved 2 of 5 and QR Code.

Security Fix(es):

A heap-based buffer overflow exists in the qrreadermatch_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.(CVE-2023-40889)

A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.(CVE-2023-40890)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:22.03-LTS-SP2 / zbar

Package

Name
zbar
Purl
pkg:rpm/openEuler/zbar&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.23.93-1.oe2203sp2

Ecosystem specific 

{
    "aarch64": [
        "zbar-qt-0.23.93-1.oe2203sp2.aarch64.rpm",
        "python3-zbar-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-debugsource-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-qt-devel-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-gtk-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-devel-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-gtk-devel-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-debuginfo-0.23.93-1.oe2203sp2.aarch64.rpm",
        "zbar-libs-0.23.93-1.oe2203sp2.aarch64.rpm"
    ],
    "src": [
        "zbar-0.23.93-1.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "python3-zbar-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-debuginfo-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-qt-devel-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-devel-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-debugsource-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-gtk-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-qt-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-gtk-devel-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-libs-0.23.93-1.oe2203sp2.x86_64.rpm",
        "zbar-0.23.93-1.oe2203sp2.x86_64.rpm"
    ]
}