A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4743-1 advisory.

    It was discovered that the GDK-PixBuf library did not properly handle certain GIF images. If an user or     automated system were tricked into opening a specially crafted GIF file, a remote attacker could use this     flaw to cause GDK-PixBuf to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-755ba8968a advisory.

  - GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the     function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11     to c. The next execution in the loop will assign self->code_table[11].extends to c, which will give the     value of 10. This will make the loop run infinitely. This bug can, for example, be triggered by calling     this function with a GIF image with LZW compression that is crafted in a special way. (CVE-2020-29385)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-2e59756cbe advisory.

  - GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the     function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11     to c. The next execution in the loop will assign self->code_table[11].extends to c, which will give the     value of 10. This will make the loop run infinitely. This bug can, for example, be triggered by calling     this function with a GIF image with LZW compression that is crafted in a special way. (CVE-2020-29385)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
147980	Ubuntu 20.04 LTS : GDK-PixBuf vulnerability (USN-4743-1)	Nessus	Ubuntu Local Security Checks	high
147770	Fedora 33 : mingw-gdk-pixbuf (2021-755ba8968a)	Nessus	Fedora Local Security Checks	high
146746	Fedora 33 : gdk-pixbuf2 / gdk-pixbuf2-xlib (2021-2e59756cbe)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2021-20240

high

Tenable Plugins

high

high

high