PT-2017-16830 · Icoutils+3 · Icoutils+3

Op7Ic \\X00 · Published 2017-02-16 · Updated 2024-06-15 · CVE-2017-6011

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions icoutils version 0.31.1

Description An issue was discovered in the simple vec function in the extract.c source file, leading to an out-of-bounds read and a buffer overflow.

Recommendations For icoutils version 0.31.1, consider restricting access to the simple vec function in the extract.c source file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CESA-2017_0837

CVE-2017-6011

DLA-854-1

DSA-3807-1

MGASA-2017-0080

OPENSUSE-SU-2024:10858-1

RHSA-2017:0837

RHSA-2017_0837

USN-3226-1

USN-4695-1

Affected Products

Centos

Red Hat

Ubuntu

Icoutils

References · 32

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854054 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2017-6011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5331 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3807-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4695-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6011 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0080 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6011 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4695-1 · Vendor Advisory
• https://debian.org/security/2017/dsa-3807 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3226-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6011 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-6011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6010 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5208 · Vendor Advisory