Описание
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| potrace | fixed | 1.14-1 | package | |
| potrace | no-dsa | stretch | package | |
| potrace | no-dsa | jessie | package | |
| potrace | no-dsa | wheezy | package |
Примечания
https://blogs.gentoo.org/ago/2016/08/29/potrace-memory-allocation-failure
http://potrace.sourceforge.net/ChangeLog claims that it's fixed in 1.14
but see https://lists.debian.org/debian-lts/2017/05/msg00032.html
EPSS
Связанные уязвимости
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
EPSS