| Package | Affected versions | Patched versions |
|---|---|---|
| little cms color engine | < 2.11 | 2.11 |
| active iq unified manager | ≥ 7.3≥ 9.5 | |
| e-series santricity os controller | = 11.0= 11.0.0= 11.20= 11.25= 11.30= 11.30.5r3= 11.40= 11.40.3r2= 11.40.5= 11.50.1= 11.50.2= 11.60= 11.60.0= 11.60.1= 11.60.3= 11.70.1= 11.70.2 | |
| oncommand unified manager | = 7.1 | |
| satellite | = 5.8 |
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free