Описание
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
Примечания
https://bugzilla.gnome.org/show_bug.cgi?id=795249
https://gitlab.gnome.org/GNOME/gegl/issues/65
POC https://github.com/xiaoqx/pocs/tree/master/gegl#2-gegl-dos-1
Architectual API limitation, negligible security impact and could not be
reproduced with current releases by upstream. Was also tracked as #1014710
EPSS
Связанные уязвимости
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
ALT-PU-2018-1716: package `libgegl` update to version 0.4.0-alt1
EPSS