CVE-2016-7446
Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1. ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Amazon (orta), Ubuntu (orta).
Açıklama
Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | GraphicsMagick, GraphicsMagick-c++, GraphicsMagick-c++-devel ve 4 tane daha | 1.3.25-1.9.amzn1 |
| debian 11 | graphicsmagick | 1.3.25-1 |
| debian 12 | graphicsmagick | 1.3.25-1 |
| debian 13 | graphicsmagick | 1.3.25-1 |
| debian 14 | graphicsmagick | 1.3.25-1 |
| debian 7 | graphicsmagick | 1.3.16-1.1+deb7u4 |
| debian 8 | graphicsmagick | 1.3.20-3+deb8u3 |
| echo | graphicsmagick | 1.3.25-1 |
| ubuntu 14.04 | graphicsmagick | 1.3.18-1ubuntu3.1 |
| ubuntu 14.04-ESM | graphicsmagick | 1.3.18-1ubuntu3.1 |
| ubuntu 16.04 | graphicsmagick | 1.3.23-1ubuntu0.1 |
| ubuntu 16.04-ESM | graphicsmagick | 1.3.23-1ubuntu0.1 |
12 kaynaktaki 18 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| amazon linux 1 | GraphicsMagick | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-c++ | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-c++-devel | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-debuginfo | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-devel | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-doc | 1.3.25-1.9.amzn1 |
| amazon linux 1 | GraphicsMagick-perl | 1.3.25-1.9.amzn1 |
| debian 11 | graphicsmagick | 1.3.25-1 |
| debian 12 | graphicsmagick | 1.3.25-1 |
| debian 13 | graphicsmagick | 1.3.25-1 |
| debian 14 | graphicsmagick | 1.3.25-1 |
| debian 7 | graphicsmagick | 1.3.16-1.1+deb7u4 |
| debian 8 | graphicsmagick | 1.3.20-3+deb8u3 |
| echo | graphicsmagick | 1.3.25-1 |
| ubuntu 14.04 | graphicsmagick | 1.3.18-1ubuntu3.1 |
| ubuntu 14.04-ESM | graphicsmagick | 1.3.18-1ubuntu3.1 |
| ubuntu 16.04 | graphicsmagick | 1.3.23-1ubuntu0.1 |
| ubuntu 16.04-ESM | graphicsmagick | 1.3.23-1ubuntu0.1 |
Referanslar
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00097.html
- http://www.openwall.com/lists/oss-security/2016/09/18/8
- http://www.securityfocus.com/bid/93074
- https://bugzilla.redhat.com/show_bug.cgi?id=1374233
- https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
- https://www.cve.org/CVERecord?id=CVE-2016-7446