Vulnerability Details CVE-2017-6312
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.0%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html
- http://www.openwall.com/lists/oss-security/2017/02/21/4
- http://www.openwall.com/lists/oss-security/2017/02/26/1
- http://www.securityfocus.com/bid/96779
- https://bugzilla.gnome.org/show_bug.cgi?id=779012
- https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/
- https://security.gentoo.org/glsa/201709-08
- http://mov.sx/2017/02/21/bug-hunting-gdk-pixbuf.html
- http://www.openwall.com/lists/oss-security/2017/02/21/4
- http://www.openwall.com/lists/oss-security/2017/02/26/1
- http://www.securityfocus.com/bid/96779
- https://bugzilla.gnome.org/show_bug.cgi?id=779012
- https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJF5ARFOX4BFUK6YCBKGAKBQYECO3AI2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSAZ6UCKKXC5VOWXGWQHOX2ZBLLATIOT/
- https://security.gentoo.org/glsa/201709-08
Products affected by CVE-2017-6312
-
cpe:2.3:a:gnome:gdk-pixbuf:-
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.34.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.9
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:fedoraproject:fedora:30
-
cpe:2.3:o:fedoraproject:fedora:31