Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.892043 |
Kategorie: | Debian Local Security Checks |
Titel: | Debian LTS: Security Advisory for gdk-pixbuf (DLA-2043-1) |
Zusammenfassung: | The remote host is missing an update for the 'gdk-pixbuf'; package(s) announced via the DLA-2043-1 advisory. |
Beschreibung: | Summary: The remote host is missing an update for the 'gdk-pixbuf' package(s) announced via the DLA-2043-1 advisory. Vulnerability Insight: Several issues in gdk-pixbuf, a library to handle pixbuf, have been found. CVE-2016-6352 fix for denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file CVE-2017-2870 Fix for an exploitable integer overflow vulnerability in the tiff_image_parse functionality. When software is compiled with clang, A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. Debian package is compiled with gcc and is not affected, but probably some downstream is. CVE-2017-6312 Fix for an integer overflow in io-ico.c that allows attackers to cause a denial of service (segmentation fault and application crash) via a crafted image CVE-2017-6313 Fix for an integer underflow in the load_resources function in io-icns.c that allows attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file CVE-2017-6314 Fix for an infinite loop in the make_available_at_least function in io-tiff.c that allows attackers to cause a denial of service via a large TIFF file. Affected Software/OS: 'gdk-pixbuf' package(s) on Debian Linux. Solution: For Debian 8 'Jessie', these problems have been fixed in version 2.31.1-2+deb8u8. We recommend that you upgrade your gdk-pixbuf packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P |
Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2016-6352 https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html http://www.openwall.com/lists/oss-security/2016/07/13/11 http://www.openwall.com/lists/oss-security/2016/07/26/11 SuSE Security Announcement: openSUSE-SU-2016:2276 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html http://www.ubuntu.com/usn/USN-3085-1 Common Vulnerability Exposure (CVE) ID: CVE-2017-2870 BugTraq ID: 100541 http://www.securityfocus.com/bid/100541 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377 Common Vulnerability Exposure (CVE) ID: CVE-2017-6312 BugTraq ID: 96779 http://www.securityfocus.com/bid/96779 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/ https://security.gentoo.org/glsa/201709-08 http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html https://bugzilla.gnome.org/show_bug.cgi?id=779012 http://www.openwall.com/lists/oss-security/2017/02/21/4 http://www.openwall.com/lists/oss-security/2017/02/26/1 Common Vulnerability Exposure (CVE) ID: CVE-2017-6313 https://bugzilla.gnome.org/show_bug.cgi?id=779016 Common Vulnerability Exposure (CVE) ID: CVE-2017-6314 https://bugzilla.gnome.org/show_bug.cgi?id=779020 |
Copyright | Copyright (C) 2019 Greenbone Networks GmbH |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |