PT-2018-5197 · Gnome+3 · Gdk-Pixbuf+3

Jun · Publicado 2017-08-21 · Atualizado 2019-05-02 · CVE-2017-1000422

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gnome gdk-pixbuf versions 2.36.8 and older

Description The issue is related to several integer overflows in the gif get lzw function, which can result in memory corruption and potentially allow code execution.

Recommendations For versions 2.36.8 and older, update to a newer version to mitigate the risk of exploitation. At the moment, there is no information about a specific newer version that contains a fix for this issue.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2017-2087

CVE-2017-1000422

DLA-1234-1

DSA-4088-1

MGASA-2018-0087

MGASA-2018-0090

OPENSUSE-SU-2018_2013-1

SUSE-SU-2018:1950-1

SUSE-SU-2018_1950-1

USN-3532-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Gdk-Pixbuf

Referências · 46

• https://ubuntu.com/security/CVE-2017-6312 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/02/26/1 · Nota
• https://suse.com/security/cve/CVE-2017-1000422 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000422 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2018-0090 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-1000422 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6314 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2017-1000422 · Nota de Segurança
• https://suse.com/support/update/announcement/2018/suse-su-20181950-1 · Nota
• https://osv.dev/vulnerability/DSA-4088-1 · Aviso do Fabricante
• https://debian.org/security/2018/dsa-4088 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:1950-1 · Aviso do Fabricante
• https://usn.ubuntu.com/3532-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-6313 · Aviso do Fabricante
• https://lists.debian.org/debian-lts-announce/2018/01/msg00007.html · Nota