CVE-2017-16938
Fixed in a distro release EPSS 2%
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.
Products: optipng_project optipng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | optipng | 0.7.6-1.1 |
| Debian 13 | optipng | 0.7.6-1.1 |
| Debian 14 | optipng | 0.7.6-1.1 |
| Debian 7 | optipng | 0.6.4-1+deb7u4 |
| Debian 8 | optipng | 0.7.5-1+deb8u2 |
| Debian 9 | optipng | 0.7.6-1+deb9u1 |
| Ubuntu 16.04 LTS | optipng | no fix |
| openSUSE Tumbleweed | optipng | 0.7.7-2.3 |