CVE-2017-1000422
Fixed in a distro release EPSS 2%
Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution
Products: gnome gdk-pixbuf, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdk-pixbuf | 2.36.11-1 |
| Debian 13 | gdk-pixbuf | 2.36.11-1 |
| Debian 14 | gdk-pixbuf | 2.36.11-1 |
| Debian 7 | gdk-pixbuf | 2.26.1-1+deb7u7 |
| Debian 8 | gdk-pixbuf | 2.31.1-2+deb8u7 |
| Debian 9 | gdk-pixbuf | 2.36.5-2+deb9u2 |
| SUSE Linux Enterprise Desktop 12 SP3 | gdk-pixbuf | 2.34.0-19.11.1 |
| SUSE Linux Enterprise Server 12 SP3 | gdk-pixbuf | 2.34.0-19.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | gdk-pixbuf | 2.34.0-19.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | gdk-pixbuf | 2.34.0-19.11.1 |
| Ubuntu 14.04 LTS | gdk-pixbuf | 2.30.7-0ubuntu1.8 |
| Ubuntu 16.04 LTS | gdk-pixbuf | 2.32.2-1ubuntu1.4 |