Описание
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 3.18.1-1ubuntu2 |
| bionic | released | 3.18.1-1ubuntu2 |
| cosmic | released | 3.18.1-1ubuntu2 |
| devel | released | 3.18.1-1ubuntu2 |
| disco | released | 3.18.1-1ubuntu2 |
| eoan | released | 3.18.1-1ubuntu2 |
| esm-apps/resolute | released | 3.18.1-1ubuntu2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [3.10.2-0ubuntu5.1]] |
| esm-infra-legacy/xenial | released | 3.18.1-1ubuntu2 |
| esm-infra/bionic | released | 3.18.1-1ubuntu2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps-legacy/xenial | not-affected | |
| esm-apps/bionic | not-affected | |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | DNE | |
| cosmic | DNE | |
| devel | needs-triage | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needed | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | DNE | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2.24.29-1ubuntu2 |
| bionic | not-affected | 2.24.29-1ubuntu2 |
| cosmic | not-affected | 2.24.29-1ubuntu2 |
| devel | not-affected | 2.24.29-1ubuntu2 |
| disco | not-affected | 2.24.29-1ubuntu2 |
| eoan | not-affected | 2.24.29-1ubuntu2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [2.24.23-0ubuntu1.4]] |
| esm-infra-legacy/xenial | not-affected | 2.24.29-1ubuntu2 |
| esm-infra/bionic | not-affected | 2.24.29-1ubuntu2 |
| esm-infra/focal | not-affected | 2.24.29-1ubuntu2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [3.10.8-0ubuntu1.6]] |
| esm-infra-legacy/xenial | not-affected | |
| esm-infra/bionic | not-affected | |
| esm-infra/focal | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | DNE | |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, allows remote attackers to cause a denial of service (crash) via a large image file, which triggers a large memory allocation.
Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gd ...
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3