CVE-2017-1000229

Опубликовано: 17 нояб. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

Ссылки

https://lists.debian.org/debian-lts-announce/2017/11/msg00030.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201801-02
Third Party Advisory
https://sourceforge.net/p/optipng/bugs/65/
Exploit
Third Party Advisory
https://www.debian.org/security/2017/dsa-4058
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00030.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201801-02
Third Party Advisory
https://sourceforge.net/p/optipng/bugs/65/
Exploit
Third Party Advisory
https://www.debian.org/security/2017/dsa-4058
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:optipng_project:optipng:0.7.6:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01968

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2017-1000229

CVSS3: 7.8

ubuntu

почти 9 лет назад

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

CVE-2017-1000229

CVSS3: 3.3

redhat

больше 8 лет назад

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

CVE-2017-1000229

CVSS3: 7.8

debian

почти 9 лет назад

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 ...

GHSA-jv9j-wgx3-2884

CVSS3: 7.8

github

больше 4 лет назад

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

openSUSE-SU-2017:3162-1

suse-cvrf

больше 8 лет назад

Security update for optipng

EPSS

Процентиль: 79%

0.01968

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-190