SUSE SLES12: gdk-pixbuf-devel / gdk-pixbuf-lang / gdk-pixbuf-query-loaders / etc (SUSE-SU-2024:1699-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1699-1 advisory. - CVE-2022-48622: Fixed files rejection with multiple anih chunks bsc1219276. Tenable has extracted the preceding description block directly...

SUSE: Security Advisory (SUSE-SU-2024:1699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] gdk-pixbuf2

New gdk-pixbuf2 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/gdk-pixbuf2-2.42.12-i586-1slack15.0.txz: Upgraded. ani: Reject files with multiple INA or IART chunks. ani: Reject files with...

Slackware: Security Advisory (SSA:2024-136-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current gdk-pixbuf2 Vulnerability (SSA:2024-136-01)

The version of gdk-pixbuf2 installed on the remote host is prior to 2.42.12. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-136-01 advisory. - In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption ...

RHEL 5 : gdk-pixbuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdk-pixbuf: heap-based overflow caused by invalid palette size CVE-2017-12447 - Integer overflow in...

RHEL 7 : gdk-pixbuf2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gdk-pixbuf2: Integer overflow in tiffimageparse function CVE-2017-2870 Note that Nessus has not tested for this iss...

RHEL 6 : gdk-pixbuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdk-pixbuf: Out-of-bounds write in OneLine32 function CVE-2016-6352 - Integer overflow in io-ico.c in...

RHEL 6 : gdk-pixbuf2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdk-pixbuf2: Integer overflow in tiffimageparse function CVE-2017-2870 - An exploitable heap overflow...

RHEL 7 : gdk-pixbuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdk-pixbuf: Integer underflow in io-icns.c CVE-2017-6313 - The OneLine32 function in io-ico.c in gdk-pixb...

BrewStillery (>=1.0.0 <=6.2.0), Druid_task1 (=0.1.0) +399 more potentially affected by unknown CVE via gdk-sys (>=0.10.0 <=0.9.1)

gdk-sys CARGO version =0.10.0, =1.0.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.21.0, =0.30.1 - avr-vm =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0418...

BrewStillery (>=1.0.0 <=6.2.0), Druid_task1 (=0.1.0) +309 more potentially affected by unknown CVE via gdk (>=0.12.1 <=0.8.0)

gdk CARGO version =0.12.1, =1.0.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.1.2, =0.1.0, =0.21.0, =0.30.1 - avr-vm =0.1.0 - awl =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0412...

CentOS 9 : gdk-pixbuf2-2.42.6-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gdk-pixbuf2-2.42.6-3.el9 build changelog. - GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data ...

ALPINE-CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

AZL-34726 CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

AZL-34069 CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.40.0-6

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

UBUNTU-CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

gdk-pixbuf security vulnerability

gdk-pixbuf is an image loading library. A security vulnerability exists in gdk-pixbuf version 2.42.10 and earlier. An attacker exploiting this vulnerability could overwrite heap metadata, resulting in a denial of service or code execution attack...

PT-2024-5877 · Unknown +9 · Gdk-Pixbuf +9

Name of the Vulnerable Software and Affected Versions: GdkPixbuf versions through 2.42.10 Description: The issue is related to heap memory corruption in the ANI decoder when parsing chunks in a crafted .ani file. This corruption can occur in the ani load chunk function and may allow an attacker t...