Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-6314

Опубликовано: 21 фев. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

Отчет

This issue affects the versions of gdk-pixbuf2 as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5gdk-pixbufNot affected
Red Hat Enterprise Linux 6gdk-pixbuf2Will not fix
Red Hat Enterprise Linux 7gdk-pixbuf2Will not fix
Red Hat Enterprise Virtualization 3mingw-virt-viewerWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-835
https://bugzilla.redhat.com/show_bug.cgi?id=1427218gdk-pixbuf: Infinite loop in io-tiff.c

EPSS

Процентиль: 61%
0.00421
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

CVSS3: 5.5
nvd
почти 9 лет назад

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

CVSS3: 5.5
debian
почти 9 лет назад

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows ...

CVSS3: 5.5
github
больше 3 лет назад

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

suse-cvrf
больше 8 лет назад

Security update for gdk-pixbuf

EPSS

Процентиль: 61%
0.00421
Низкий

3.3 Low

CVSS3