CVE-2016-8685

概要

参考情報

• openwall.com/lists/oss-security/2016/10/08/17 · Mailing List
• openwall.com/lists/oss-security/2016/10/16/9 · Mailing List
• securityfocus.com/bid/93470 · Third Party Advisory
• blogs.gentoo.org/ago/2016/08/29/potrace-invalid-memory-access-in-findnext-decompose-c · Third Party Advisory

potrace のその他の脆弱性

• CVE-2017-12067高 7.5Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
• CVE-2017-7263高 7.8The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-rea…
• CVE-2016-8703高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8702高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…
• CVE-2016-8701高 7.8Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified…