Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-10165

Fixed in a distro release EPSS 3%

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Published 2017-02-03 · CVE record · OSV

Products: littlecms little_cms_color_engine, canonical ubuntu_linux, debian_linux, opensuse leap, redhat satellite, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, netapp active_iq_unified_manager, netapp e-series_santricity_management, netapp e-series_santricity_os_controller, netapp oncommand_balance, netapp oncommand_insight, netapp oncommand_performance_manager, netapp oncommand_shift, netapp oncommand_unified_manager

Distro releases

ReleasePackageFixed in
Alpine 3.10lcms22.8-r1
Alpine 3.11lcms22.8-r1
Alpine 3.12lcms22.8-r1
Alpine 3.13lcms22.8-r1
Alpine 3.14lcms22.8-r1
Alpine 3.15lcms22.8-r1
Alpine 3.16lcms22.8-r1
Alpine 3.17lcms22.8-r1
Alpine 3.18lcms22.8-r1
Alpine 3.19lcms22.8-r1
Alpine 3.2lcms22.8-r0
Alpine 3.20lcms22.8-r1
Alpine 3.21lcms22.8-r1
Alpine 3.22lcms22.8-r1
Alpine 3.23lcms22.8-r1
Alpine 3.24lcms22.8-r1
Alpine 3.3lcms22.8-r0
Alpine 3.4lcms22.8-r0
Alpine 3.5lcms22.8-r1
Alpine 3.6lcms22.8-r1
Alpine 3.7lcms22.8-r1
Alpine 3.8lcms22.8-r1
Alpine 3.9lcms22.8-r1
Debian 12lcms22.8-4
Debian 13lcms22.8-4
Debian 14lcms22.8-4
Debian 7lcms22.2+git20110628-2.2+deb7u2
Debian 8lcms22.6-3+deb8u1
Red Hat Enterprise Linux 5java-1.7.0-openjdk1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 5java-1.7.0-openjdk-debuginfo1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 5java-1.7.0-openjdk-demo1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 5java-1.7.0-openjdk-devel1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 5java-1.7.0-openjdk-javadoc1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 5java-1.7.0-openjdk-src1:1.7.0.121-2.6.8.1.el5_11
Red Hat Enterprise Linux 6java-1.7.0-openjdk1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.7.0-openjdk-debuginfo1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.7.0-openjdk-demo1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.7.0-openjdk-devel1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.7.0-openjdk-javadoc1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.7.0-openjdk-src1:1.7.0.121-2.6.8.1.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-debuginfo1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-demo1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-demo-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-devel1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-devel-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-headless1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-headless-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-javadoc1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-javadoc-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-src1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 6java-1.8.0-openjdk-src-debug1:1.8.0.111-0.b15.el6_8
Red Hat Enterprise Linux 7java-1.7.0-openjdk1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-accessibility1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-debuginfo1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-demo1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-devel1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-headless1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-javadoc1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.7.0-openjdk-src1:1.7.0.121-2.6.8.0.el7_3
Red Hat Enterprise Linux 7java-1.8.0-openjdk1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-accessibility1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-accessibility-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-debuginfo1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-demo1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-demo-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-devel1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-devel-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-headless1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-headless-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-javadoc1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-javadoc-debug1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-src1:1.8.0.111-1.b15.el7_2
Red Hat Enterprise Linux 7java-1.8.0-openjdk-src-debug1:1.8.0.111-1.b15.el7_2
Red Hat network satellite 5.8java-1.8.0-ibm1:1.8.0.5.5-1jpp.1.el6_9
Red Hat network satellite 5.8java-1.8.0-ibm-devel1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.7.1-ibm1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.7.1-ibm-demo1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.7.1-ibm-devel1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.7.1-ibm-jdbc1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.7.1-ibm-plugin1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.7.1-ibm-src1:1.7.1.4.15-1jpp.3.el6_9
Red Hat rhel extras 6java-1.8.0-ibm1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.8.0-ibm-demo1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.8.0-ibm-devel1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.8.0-ibm-jdbc1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.8.0-ibm-plugin1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 6java-1.8.0-ibm-src1:1.8.0.5.5-1jpp.1.el6_9
Red Hat rhel extras 7java-1.7.1-ibm1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.7.1-ibm-demo1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.7.1-ibm-devel1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.7.1-ibm-jdbc1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.7.1-ibm-plugin1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.7.1-ibm-src1:1.7.1.4.15-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm-demo1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm-devel1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm-jdbc1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm-plugin1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras 7java-1.8.0-ibm-src1:1.8.0.5.5-1jpp.2.el7
Red Hat rhel extras oracle java 6java-1.7.0-oracle1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-devel1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-javafx1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-jdbc1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-plugin1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.7.0-oracle-src1:1.7.0.161-1jpp.3.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-devel1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-javafx1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-jdbc1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-plugin1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 6java-1.8.0-oracle-src1:1.8.0.151-1jpp.1.el6
Red Hat rhel extras oracle java 7java-1.7.0-oracle1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-devel1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-javafx1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-jdbc1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-plugin1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.7.0-oracle-src1:1.7.0.161-1jpp.4.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle1:1.8.0.151-1jpp.5.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-devel1:1.8.0.151-1jpp.5.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-javafx1:1.8.0.151-1jpp.5.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-jdbc1:1.8.0.151-1jpp.5.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-plugin1:1.8.0.151-1jpp.5.el7
Red Hat rhel extras oracle java 7java-1.8.0-oracle-src1:1.8.0.151-1jpp.5.el7
SUSE Linux Enterprise Desktop 12 SP2java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Desktop 12 SP2java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Desktop 12 SP3java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Desktop 12 SP3java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Desktop 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Point of Sale 11 SP3java-1_7_0-ibm1.7.0_sr10.15-65.8.1
SUSE Linux Enterprise Server 11 SP3-LTSSjava-1_7_0-ibm1.7.0_sr10.15-65.8.1
SUSE Linux Enterprise Server 11 SP3-TERADATAjava-1_7_0-ibm1.7.0_sr10.15-65.8.1
SUSE Linux Enterprise Server 11 SP4java-1_7_1-ibm1.7.1_sr4.15-26.8.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server 12 SP2java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server 12 SP2java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server 12 SP2java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server 12 SP2java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server 12 SP3java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server 12 SP3java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server 12 SP3java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server 12 SP3java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Server 12-LTSSjava-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server 12-LTSSjava-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4java-1_7_1-ibm1.7.1_sr4.15-26.8.1
SUSE Linux Enterprise Server for SAP Applications 12java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_8_0-openjdk1.8.0.151-27.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Software Development Kit 11 SP4java-1_7_1-ibm1.7.1_sr4.15-26.8.1
SUSE Linux Enterprise Software Development Kit 12 SP2java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Software Development Kit 12 SP2java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Software Development Kit 12 SP3java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE Linux Enterprise Software Development Kit 12 SP3java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE Linux Enterprise Software Development Kit 12 SP3lcms22.7-9.7.1
SUSE OpenStack Cloud 6java-1_7_0-openjdk1.7.0.161-43.7.6
SUSE OpenStack Cloud 6java-1_7_1-ibm1.7.1_sr4.15-38.8.1
SUSE OpenStack Cloud 6java-1_8_0-ibm1.8.0_sr5.5-30.13.1
SUSE OpenStack Cloud 6java-1_8_0-openjdk1.8.0.151-27.8.1
Ubuntu 14.04 LTSlcms22.5-0ubuntu4.2
Ubuntu 14.04 LTSopenjdk-77u121-2.6.8-1ubuntu0.14.04.1
Ubuntu 16.04 LTSlcms22.6-3ubuntu2.1
Ubuntu 18.04 LTSlcms22.8-4
Ubuntu 18.04 LTSlcms22.9-1ubuntu0.1
openSUSE Tumbleweedjava-1_8_0-openjdk1.8.0.302-2.2