Yüksek CVSS 7.1
CVE-2016-10165: Little Cms Color Engine: sınır dışı okuma
Açıklama (NVD)
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
Özet bilgiler
- Ürün
- Littlecms Little Cms Color Engine
- CVSS v3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - EPSS
- %2,76 (yüzdelik 86)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| littlecms-little-cms-color-engine | — | — | 2.11 |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| opensuse-leap | 42.1 | 42.1 | — |
| redhat-satellite | 5.8 | 5.8 | — |
| redhat-enterprise-linux-desktop | 5.0 | 5.0 | — |
| redhat-enterprise-linux-desktop | 6.0 | 6.0 | — |
| redhat-enterprise-linux-desktop | 7.0 | 7.0 | — |
| redhat-enterprise-linux-server | 5.0 | 5.0 | — |
| redhat-enterprise-linux-server | 6.0 | 6.0 | — |
| redhat-enterprise-linux-server | 7.0 | 7.0 | — |
| redhat-enterprise-linux-server-aus | 7.3 | 7.3 | — |
| redhat-enterprise-linux-server-aus | 7.4 | 7.4 | — |
| redhat-enterprise-linux-server-aus | 7.6 | 7.6 | — |
| redhat-enterprise-linux-server-aus | 7.7 | 7.7 | — |
| redhat-enterprise-linux-server-eus | 7.3 | 7.3 | — |
| redhat-enterprise-linux-server-eus | 7.4 | 7.4 | — |
| redhat-enterprise-linux-server-eus | 7.5 | 7.5 | — |
| redhat-enterprise-linux-server-eus | 7.6 | 7.6 | — |
| redhat-enterprise-linux-server-eus | 7.7 | 7.7 | — |
| redhat-enterprise-linux-server-tus | 7.3 | 7.3 | — |
| redhat-enterprise-linux-server-tus | 7.6 | 7.6 | — |
| redhat-enterprise-linux-server-tus | 7.7 | 7.7 | — |
| redhat-enterprise-linux-workstation | 5.0 | 5.0 | — |
| redhat-enterprise-linux-workstation | 6.0 | 6.0 | — |
| redhat-enterprise-linux-workstation | 7.0 | 7.0 | — |
| netapp-active-iq-unified-manager | 7.3 | — | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- rhn.redhat.com
- rhn.redhat.com
- www.debian.org
- www.openwall.com
- www.openwall.com
- www.oracle.com
- www.securityfocus.com
- www.securitytracker.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- github.com
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- lists.opensuse.org
- rhn.redhat.com
- rhn.redhat.com
- www.debian.org
- www.openwall.com
- CWE-125