Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-10165

Опубликовано: 15 авг. 2016
Источник: redhat
CVSS3: 7.1
CVSS2: 5.8

Описание

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5lcmsNot affected
Red Hat Enterprise Linux 6lcmsNot affected
Red Hat Enterprise Linux 7lcms2Will not fix
Red Hat OpenShift Enterprise 2lcmsNot affected
Oracle Java for Red Hat Enterprise Linux 6java-1.8.0-oracleFixedRHSA-2017:299923.10.2017
Oracle Java for Red Hat Enterprise Linux 6java-1.7.0-oracleFixedRHSA-2017:304624.10.2017
Oracle Java for Red Hat Enterprise Linux 7java-1.8.0-oracleFixedRHSA-2017:299923.10.2017
Oracle Java for Red Hat Enterprise Linux 7java-1.7.0-oracleFixedRHSA-2017:304624.10.2017
Red Hat Enterprise Linux 5java-1.7.0-openjdkFixedRHSA-2016:265807.11.2016
Red Hat Enterprise Linux 6java-1.8.0-openjdkFixedRHSA-2016:207919.10.2016

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1367357lcms2: Out-of-bounds read in Type_MLU_Read()

7.1 High

CVSS3

5.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 9 лет назад

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

CVSS3: 7.1
nvd
больше 9 лет назад

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

CVSS3: 7.1
debian
больше 9 лет назад

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) all ...

CVSS3: 7.1
github
больше 4 лет назад

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

suse-cvrf
почти 8 лет назад

Security update for lcms2

7.1 High

CVSS3

5.8 Medium

CVSS2