Описание
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 8.7.4-1 |
| disco | not-affected | 8.7.4-1 |
| eoan | not-affected | 8.7.4-1 |
| esm-apps-legacy/xenial | released | 8.2.2-1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 8.4.5-1ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 8.7.4-1 |
| esm-apps/jammy | not-affected | 8.7.4-1 |
| esm-apps/xenial | released | 8.2.2-1ubuntu0.1~esm1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3
Связанные уязвимости
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
libvips before 8.7.4 generates output images from uninitialized memory ...
libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.
ALT-PU-2020-1098: package `vips` update to version 8.9.0-alt2
EPSS
5 Medium
CVSS2
5.3 Medium
CVSS3