CVE-2016-8685

Description

References

• openwall.com/lists/oss-security/2016/10/08/17 · Mailing List
• openwall.com/lists/oss-security/2016/10/16/9 · Mailing List
• securityfocus.com/bid/93470 · Third Party Advisory
• blogs.gentoo.org/ago/2016/08/29/potrace-invalid-memory-access-in-findnext-decompose-c · Third Party Advisory

Weitere Schwachstellen in potrace

• CVE-2017-12067HOCH 7.5Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
• CVE-2017-7263HOCH 7.8The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-rea…
• CVE-2016-8703HOCH 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8702HOCH 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8701HOCH 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…