Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdk-pixbuf: Integer overflows in various pixops functions (CVE-2015-8875)

  - io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote     attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly     execute arbitrary code via a crafted Truevision TGA (TARGA) file. (CVE-2015-7673)

  - Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1     allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary     code via a crafted GIF image file, which triggers a heap-based buffer overflow. (CVE-2015-7674)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gdk-pixbuf: Out-of-bounds read in io-ico.c (CVE-2017-6312)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables (CVE-2011-2897)

  - io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote     attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly     execute arbitrary code via a crafted Truevision TGA (TARGA) file. (CVE-2015-7673)

  - Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1     allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary     code via a crafted GIF image file, which triggers a heap-based buffer overflow. (CVE-2015-7674)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - gdk-pixbuf is an image loading library that can be     extended by loadable modules for new image formats. It     is used by toolkits such as GTK+ or clutter. Security     Fix(es):The make_available_at_least function in     io-tiff.c in gdk-pixbuf allows context-dependent     attackers to cause a denial of service (infinite loop)     via a large TIFF file.(CVE-2017-6314)Integer underflow     in the load_resources function in io-icns.c in     gdk-pixbuf allows context-dependent attackers to cause     a denial of service (out-of-bounds read and program     crash) via a crafted image entry size in an ICO     file.(CVE-2017-6313)An out-of-bounds read flaw was     found in the way GdkPixbuf handled ICO format files. A     maliciously crafted ICO file could cause the     application using GdkPixbuf to crash.(CVE-2017-6312)An     exploitable integer overflow vulnerability exists in     the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6     when compiled with Clang. A specially crafted tiff file     can cause a heap-overflow resulting in remote code     execution. An attacker can send a file or a URL to     trigger this vulnerability.(CVE-2017-2870)An     exploitable heap overflow vulnerability exists in the     gdk_pixbuf__jpeg_image_load_increment functionality of     Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can     cause a heap overflow resulting in remote code     execution. An attacker can send a file or url to     trigger this vulnerability.(CVE-2017-2862)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in io-ico.c in gdk-pixbuf allows     context-dependent attackers to cause a denial of     service (segmentation fault and application crash) via     a crafted image entry offset in an ICO file, which     triggers an out-of-bounds read, related to compiler     optimizations.(CVE-2017-6312)

  - Integer underflow in the load_resources function in     io-icns.c in gdk-pixbuf allows context-dependent     attackers to cause a denial of service (out-of-bounds     read and program crash) via a crafted image entry size     in an ICO file.(CVE-2017-6313)

  - The make_available_at_least function in io-tiff.c in     gdk-pixbuf allows context-dependent attackers to cause     a denial of service (infinite loop) via a large TIFF     file.(CVE-2017-6314)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in io-ico.c in gdk-pixbuf allows     context-dependent attackers to cause a denial of     service (segmentation fault and application crash) via     a crafted image entry offset in an ICO file, which     triggers an out-of-bounds read, related to compiler     optimizations.(CVE-2017-6312)

  - Integer underflow in the load_resources function in     io-icns.c in gdk-pixbuf allows context-dependent     attackers to cause a denial of service (out-of-bounds     read and program crash) via a crafted image entry size     in an ICO file.(CVE-2017-6313)

  - The make_available_at_least function in io-tiff.c in     gdk-pixbuf allows context-dependent attackers to cause     a denial of service (infinite loop) via a large TIFF     file.(CVE-2017-6314)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in io-ico.c in gdk-pixbuf allows     context-dependent attackers to cause a denial of     service (segmentation fault and application crash) via     a crafted image entry offset in an ICO file, which     triggers an out-of-bounds read, related to compiler     optimizations.(CVE-2017-6312)

  - Integer underflow in the load_resources function in     io-icns.c in gdk-pixbuf allows context-dependent     attackers to cause a denial of service (out-of-bounds     read and program crash) via a crafted image entry size     in an ICO file.(CVE-2017-6313)

  - The make_available_at_least function in io-tiff.c in     gdk-pixbuf allows context-dependent attackers to cause     a denial of service (infinite loop) via a large TIFF     file.(CVE-2017-6314)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MinGW cross compiled gdk-pixbuf 2.36.12 release, fixing various CVE's.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 2.40.0.

----

MinGW cross compiled gdk-pixbuf 2.36.12 release, fixing various CVE's.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in io-ico.c in gdk-pixbuf allows     context-dependent attackers to cause a denial of     service (segmentation fault and application crash) via     a crafted image entry offset in an ICO file, which     triggers an out-of-bounds read, related to compiler     optimizations.(CVE-2017-6312)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gtk2 provides the following fixes: These security issues were fixed :

  - CVE-2017-6312: Prevent integer overflow that allowed     context-dependent attackers to cause a denial of service     (segmentation fault and application crash) via a crafted     image entry offset in an ICO file (bsc#1027026).

  - CVE-2017-6314: The make_available_at_least function     allowed context-dependent attackers to cause a denial of     service (infinite loop) via a large TIFF file     (bsc#1027025).

  - CVE-2017-6313: Prevent integer underflow in the     load_resources function that allowed context-dependent     attackers to cause a denial of service (out-of-bounds     read and program crash) via a crafted image entry size     in an ICO file (bsc#1027024).

  - CVE-2017-2862: Prevent heap overflow in the     gdk_pixbuf__jpeg_image_load_increment function. A     specially crafted jpeg file could have caused a heap     overflow resulting in remote code execution     (bsc#1048289)

  - CVE-2017-2870: Prevent integer overflow in the     tiff_image_parse functionality. A specially crafted tiff     file could have caused a heap-overflow resulting in     remote code execution (bsc#1048544).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3532-1 advisory.

    It was discoreved that GDK-PixBuf incorrectly handled certain gif images. An attacker could use this to     execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-1000422)

    Ariel Zelivansky discovered that GDK-PixBuf incorrectly handled certain images. An attacker could use this     to cause a denial of service. (CVE-2017-6312, CVE-2017-6313)

    Ariel Zelivansky discovered that GDK-PixBuf incorrectly handled large TIFF files. An attacker could use     this to cause a denial of service. (CVE-2017-6314)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201709-08 (GDK-PixBuf: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GDK-PixBuf. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker, by sending a specially crafted TIFF, JPEG, or URL,       could execute arbitrary code with the privileges of the process or cause       a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for gdk-pixbuf fixes the following issues :

  - CVE-2017-2862: JPEG     gdk_pixbuf__jpeg_image_load_increment Code Execution     Vulnerability (bsc#1048289)

  - CVE-2017-2870: tiff_image_parse Code Execution     Vulnerability (bsc#1048544)

  - CVE-2017-6313: A dangerous integer underflow in     io-icns.c (bsc#1027024)

  - CVE-2017-6314: Infinite loop in io-tiff.c (bsc#1027025)

  - CVE-2017-6312: Out-of-bounds read on io-ico.c     (bsc#1027026)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for gdk-pixbuf fixes the following issues :

  - CVE-2017-2862: JPEG     gdk_pixbuf__jpeg_image_load_increment Code Execution     Vulnerability (bsc#1048289)

  - CVE-2017-2870: tiff_image_parse Code Execution     Vulnerability (bsc#1048544)

  - CVE-2017-6313: A dangerous integer underflow in     io-icns.c (bsc#1027024)

  - CVE-2017-6314: Infinite loop in io-tiff.c (bsc#1027025)

  - CVE-2017-6312: Out-of-bounds read on io-ico.c     (bsc#1027026)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
200058	RHEL 7 : gdk-pixbuf (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
200037	RHEL 6 : gdk-pixbuf (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199938	RHEL 5 : gdk-pixbuf (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
151300	EulerOS Virtualization for ARM 64 3.0.2.0 : gdk-pixbuf2 (EulerOS-SA-2021-2111)	Nessus	Huawei Local Security Checks	high
147495	EulerOS Virtualization 3.0.6.6 : gdk-pixbuf2 (EulerOS-SA-2021-1475)	Nessus	Huawei Local Security Checks	high
147442	EulerOS Virtualization 3.0.2.6 : gdk-pixbuf2 (EulerOS-SA-2021-1433)	Nessus	Huawei Local Security Checks	high
146128	EulerOS 2.0 SP5 : gdk-pixbuf2 (EulerOS-SA-2021-1191)	Nessus	Huawei Local Security Checks	high
133579	Fedora 30 : mingw-gdk-pixbuf (2020-a718b79006)	Nessus	Fedora Local Security Checks	high
133568	Fedora 31 : mingw-gdk-pixbuf (2020-418ce730df)	Nessus	Fedora Local Security Checks	high
132302	EulerOS 2.0 SP3 : gdk-pixbuf2 (EulerOS-SA-2019-2585)	Nessus	Huawei Local Security Checks	high
131878	EulerOS 2.0 SP2 : gdk-pixbuf2 (EulerOS-SA-2019-2386)	Nessus	Huawei Local Security Checks	high
112057	SUSE SLES11 Security Update : gtk2 (SUSE-SU-2018:2470-1)	Nessus	SuSE Local Security Checks	high
106074	Ubuntu 14.04 LTS / 16.04 LTS : GDK-PixBuf vulnerabilities (USN-3532-1)	Nessus	Ubuntu Local Security Checks	high
103276	GLSA-201709-08 : GDK-PixBuf: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
103160	openSUSE Security Update : gdk-pixbuf (openSUSE-2017-1024)	Nessus	SuSE Local Security Checks	high
102990	SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2017:2381-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2017-6312

medium

Tenable Plugins

high

medium

critical

high

high

high

high

high

high

high

high

high

high

high

high

high