Описание
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| vips | fixed | 8.7.4-1 | package | |
| vips | fixed | 8.4.5-1+deb9u1 | stretch | package |
| vips | ignored | jessie | package |
Примечания
https://github.com/libvips/libvips/commit/00622428bda8d7521db8d74260b519fa41d69d0a
EPSS
Связанные уязвимости
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
ALT-PU-2020-1098: package `vips` update to version 8.9.0-alt2
EPSS