ID de Prueba:	1.3.6.1.4.1.25623.1.0.892043
Categoría:	Debian Local Security Checks
Título:	Debian LTS: Security Advisory for gdk-pixbuf (DLA-2043-1)
Resumen:	The remote host is missing an update for the 'gdk-pixbuf'; package(s) announced via the DLA-2043-1 advisory.
Descripción:	Summary: The remote host is missing an update for the 'gdk-pixbuf' package(s) announced via the DLA-2043-1 advisory. Vulnerability Insight: Several issues in gdk-pixbuf, a library to handle pixbuf, have been found. CVE-2016-6352 fix for denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file CVE-2017-2870 Fix for an exploitable integer overflow vulnerability in the tiff_image_parse functionality. When software is compiled with clang, A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. Debian package is compiled with gcc and is not affected, but probably some downstream is. CVE-2017-6312 Fix for an integer overflow in io-ico.c that allows attackers to cause a denial of service (segmentation fault and application crash) via a crafted image CVE-2017-6313 Fix for an integer underflow in the load_resources function in io-icns.c that allows attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file CVE-2017-6314 Fix for an infinite loop in the make_available_at_least function in io-tiff.c that allows attackers to cause a denial of service via a large TIFF file. Affected Software/OS: 'gdk-pixbuf' package(s) on Debian Linux. Solution: For Debian 8 'Jessie', these problems have been fixed in version 2.31.1-2+deb8u8. We recommend that you upgrade your gdk-pixbuf packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6352 https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html http://www.openwall.com/lists/oss-security/2016/07/13/11 http://www.openwall.com/lists/oss-security/2016/07/26/11 SuSE Security Announcement: openSUSE-SU-2016:2276 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html http://www.ubuntu.com/usn/USN-3085-1 Common Vulnerability Exposure (CVE) ID: CVE-2017-2870 BugTraq ID: 100541 http://www.securityfocus.com/bid/100541 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377 Common Vulnerability Exposure (CVE) ID: CVE-2017-6312 BugTraq ID: 96779 http://www.securityfocus.com/bid/96779 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/ https://security.gentoo.org/glsa/201709-08 http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html https://bugzilla.gnome.org/show_bug.cgi?id=779012 http://www.openwall.com/lists/oss-security/2017/02/21/4 http://www.openwall.com/lists/oss-security/2017/02/26/1 Common Vulnerability Exposure (CVE) ID: CVE-2017-6313 https://bugzilla.gnome.org/show_bug.cgi?id=779016 Common Vulnerability Exposure (CVE) ID: CVE-2017-6314 https://bugzilla.gnome.org/show_bug.cgi?id=779020
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.