DEBIAN-CVE-2017-2580

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2017-2579

An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution...

CVE-2017-2581

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2017-2587

A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash...

CVE-2017-2586

CVE-2017-2586 involves a null pointer dereference in netpbm prior to version 10.61 triggered by a maliciously crafted SVG file, potentially causing the application to crash. Affected: netpbm (any build before 10.61). Impact stated in sources: crash risk; no evidence in the provided docs of code e...

CVE-2017-2579

CVE-2017-2579 affects netpbm prior to 10.61: an out-of-bounds read due to an insufficient check in expandCodeOntoStack(), which could cause a crash and potentially allow code execution when processing crafted image files. The vulnerability status and impact are described across multiple advisorie...

CVE-2017-2586

A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash...

CVE-2017-2587

CVE-2017-2587 affects netpbm up to version prior to 10.61, where a memory-allocation check issue could cause a crash when processing a crafted SVG file. Public documentation in the connected sources confirms the vulnerability and lists affected packages in various Linux distros as unpatched (e.g....

CVE-2017-2581

CVE-2017-2581 concerns an out-of-bounds write in netPBM prior to 10.61. The vulnerability could cause a crash or possibly allow code execution via a crafted file. Connected advisories (Red Hat NASL entries for RHEL5/6) indicate this issue among unpatched vulnerabilities, with some listings explic...

CVE-2017-2579

An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution...

CVE-2017-2580

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2017-2580

CVE-2017-2580 affects netpbm up to version before 10.61. The vulnerability is an out-of-bounds write in netpbm’s processing (e.g., writeRasterPbm/write path), which could crash the application and, in some cases, allow code execution when processing crafted files. Public references in the provide...

CVE-2017-2580

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2017-2586

A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash...

CVE-2017-2579

An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution...

CVE-2017-2581

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2017-2587

A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash...

CVE-2017-2581

An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution...

CVE-2018-8975

The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file, as demonstrated by pbmmask...

Netpbm Denial of Service Vulnerability (CNVD-2018-06875)

Netpbm is a suite of image format conversion and editing software. A security vulnerability exists in the 'pmmallocarray2' function in the lib/util/mallocvar.c file in Netpbm 10.81.03 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service heap-based...