PT-2020-6966 · Gnome +5 · Gdk-Pixbuf +5

🗓️ 08 Dec 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

GNOME gdk-pixbuf before 2.42.2 may cause denial of service from an infinite loop in GIF handling.

Reporter	Title	Published	Views	Family All 214
FreeBSD	gdk-pixbuf -- multiple vulnerabilities	30 Aug 201700:00	–	freebsd
AlpineLinux	CVE-2017-2862	5 Sep 201718:00	–	alpinelinux
AlpineLinux	CVE-2017-6312	10 Mar 201702:00	–	alpinelinux
AlpineLinux	CVE-2020-29385	26 Dec 202002:01	–	alpinelinux
AlpineLinux	CVE-2021-20240	28 May 202110:42	–	alpinelinux
ArchLinux	[ASA-202012-19] gdk-pixbuf2: denial of service	9 Dec 202000:00	–	archlinux
ArchLinux	[ASA-202012-20] lib32-gdk-pixbuf2: denial of service	9 Dec 202000:00	–	archlinux
BDU FSTEC	The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the write_indexes() function in the GdkPixbuf image loading library allows a attacker to cause a service failure.	9 Apr 202400:00	–	bdu_fstec
Cent OS	PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update	15 Nov 201818:43	–	centos

Source	Link
errata	www.errata.altlinux.org/ALT-PU-2020-3463
osv	www.osv.dev/vulnerability/CVE-2020-29385
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-29385
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D
ubuntu	www.ubuntu.com/security/notices/USN-4663-1
osv	www.osv.dev/vulnerability/openSUSE-SU-2021:0150-1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2020-29385
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-29385
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:10779-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

29 Apr 2025 00:00Current

8High risk

Vulners AI Score8

CVSS 3.15.5 - 8.8

CVSS 28.3

CVSS 38.8

EPSS0.04599