CVE-2018-16435

Mô tả

Tham khảo

• access.redhat.com/errata/RHSA-2018:3004 · Third Party Advisory
• mm2/Little-CMS commit 768f70c · Patch
• mm2/Little-CMS · Exploit
• lists.debian.org/debian-lts-announce/2018/09/msg00005.html · Mailing List
• security.gentoo.org/glsa/202105-18
• usn.ubuntu.com/3770-1 · Third Party Advisory
• usn.ubuntu.com/3770-2 · Third Party Advisory
• debian.org/security/2018/dsa-4284 · Third Party Advisory

Lỗ hổng khác của little cms color engine

• CVE-2016-10165CAO 7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial…
• CVE-2013-7455NGHIÊM TRỌNG 9.8Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers t…
• CVE-2013-4160TRUNG BÌNH 5.0Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL …
• CVE-2013-4276TRUNG BÌNH 4.3Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of servic…
• CVE-2008-5317NGHIÊM TRỌNG 10.0Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers …