CVE-2017-1000229
Fixed in a distro release EPSS 2%
Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.
Products: optipng_project optipng, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | optipng | 0.7.6-1.1 |
| Debian 13 | optipng | 0.7.6-1.1 |
| Debian 14 | optipng | 0.7.6-1.1 |
| Debian 7 | optipng | 0.6.4-1+deb7u3 |
| Debian 8 | optipng | 0.7.5-1+deb8u2 |
| Debian 9 | optipng | 0.7.6-1+deb9u1 |
| Ubuntu 14.04 LTS | optipng | 0.6.4-1ubuntu0.14.04.2 |
| Ubuntu 16.04 LTS | optipng | 0.7.6-1ubuntu0.16.04.1 |
| openSUSE Tumbleweed | optipng | 0.7.7-2.3 |