PT-2023-8922 · Optipng+3 · Optipng+3

Frank-Z7

·

Publicado

2023-09-30

·

Atualizado

2024-09-23

·

CVE-2023-43907

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OptiPNG version 0.7.7
Description The issue is related to a global buffer overflow via the buffer variable at gifread.c. This can potentially allow an attacker to cause a denial of service or other impact.
Recommendations For OptiPNG version 0.7.7, update the optipng package to fix the security vulnerability. As a temporary workaround, consider restricting the use of the GIF handler to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

ALT-PU-2023-7005
ALT-PU-2023-7460
AZL-36971
AZL-37153
BDU:2024-02626
CVE-2023-43907
MGASA-2023-0333
OESA-2023-1873
OPENSUSE-SU-2023:0388-1
OPENSUSE-SU-2024:13415-1

Produtos afetados

Alt Linux
Debian
Optipng
Red Os