The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.

This release consists of bugfixes and minor portability improvements.
Some potential buffer overflows and arithmetic overflows were fixed, including CVE-2017-12067. A bug triggered by very large bitmaps has been fixed.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that potrace, an utility to transform bitmaps into vector graphics, was affected by an integer overflow in the findnext function, allowing remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image.

For Debian 7 'Wheezy', these problems have been fixed in version 1.10-1+deb7u2.

We recommend that you upgrade your potrace packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for potrace to version 1.14 fixes the following issues :

Security issues fixed :

  - CVE-2016-8685, CVE-2016-8686: Bugs triggered by     malformed BMP files have been fixed (boo#1005026).

Bugfixes :

  - Error reporting has been improved.

  - The image size is now truncated when the bitmap data     ends prematurely.

  - It is now possible to use negative dy in bitmap data.

potrace reports :

CVE-2016-8685: invalid memory access in findnext

CVE-2016-8686: memory allocation failure

ID	Name	Product	Family	Severity
102507	Fedora 25 : potrace (2017-d7739ff31b)	Nessus	Fedora Local Security Checks	high
102452	Fedora 26 : potrace (2017-44bfb0f3e5)	Nessus	Fedora Local Security Checks	high
99253	Debian DLA-889-1 : potrace security update	Nessus	Debian Local Security Checks	medium
97651	openSUSE Security Update : potrace (openSUSE-2017-319)	Nessus	SuSE Local Security Checks	high
97457	FreeBSD : potrace -- multiple memory failure (f4eb9a25-fde0-11e6-9ad0-b8aeed92ecc4)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2016-8685

medium

Tenable Plugins

high

high

medium

high

high