CVE-2017-2580

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html
• securityfocus.com/bid/96712 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

netpbm のその他の脆弱性

• CVE-2017-2587中 5.5A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
• CVE-2017-2586中 5.5A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to cra…
• CVE-2017-2581高 7.8An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or po…
• CVE-2017-2579高 7.8An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value chec…
• CVE-2018-8975中 5.5The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-b…