An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function and the imagesize variable.

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2911 advisory.

  - An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer     over-read, related to the load_apng function and the imagesize variable. (CVE-2017-6960)

  - An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory     allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value     (within the PNG file) to determine the amount of memory to allocate. (CVE-2017-6961)

  - An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer     overflow. This is related to the read_chunk function making an unchecked addition of 12. (CVE-2017-6962)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4513-1 advisory.

    Dileep Kumar Jallepalli discovered that apng2gif incorrectly handled loading APNG files. An attacker could     exploit this with a crafted APNG file to access sensitive information. (CVE-2017-6960)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An issue has been found in apng2gif, a tool for converting APNG images to animated GIF format.

One of the function contained an integer overflow resulting in a heap-based buffer over-read.

For Debian 8 'Jessie', this problem has been fixed in version 1.5-3+deb8u1.

We recommend that you upgrade your apng2gif packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that apng2gif was vulnerable to an integer overflow resulting in a heap-based buffer over-read/write. A remote attacker could use this flaw to cause a denial of service (application crash) via a crafted APNG file.

For Debian 7 'Wheezy', these problems have been fixed in version 1.5-1+deb7u1.

We recommend that you upgrade your apng2gif packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
157397	Debian DLA-2911-1 : apng2gif - LTS security update	Nessus	Debian Local Security Checks	high
140638	Ubuntu 16.04 LTS : apng2gif vulnerability (USN-4513-1)	Nessus	Ubuntu Local Security Checks	high
135100	Debian DLA-2165-1 : apng2gif security update	Nessus	Debian Local Security Checks	high
100673	Debian DLA-981-1 : apng2gif security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-6960

high

Tenable Plugins

high

high

high

high