Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-16435

Fixed in a distro release EPSS 2%

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Published 2018-09-04 · CVE record · OSV

Products: littlecms little_cms_color_engine, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10lcms22.9-r1
Alpine 3.11lcms22.9-r1
Alpine 3.12lcms22.9-r1
Alpine 3.13lcms22.9-r1
Alpine 3.14lcms22.9-r1
Alpine 3.15lcms22.9-r1
Alpine 3.16lcms22.9-r1
Alpine 3.17lcms22.9-r1
Alpine 3.18lcms22.9-r1
Alpine 3.19lcms22.9-r1
Alpine 3.20lcms22.9-r1
Alpine 3.21lcms22.9-r1
Alpine 3.22lcms22.9-r1
Alpine 3.23lcms22.9-r1
Alpine 3.24lcms22.9-r1
Alpine 3.8lcms22.9-r1
Alpine 3.9lcms22.9-r1
Debian 12lcms22.9-3
Debian 13lcms22.9-3
Debian 14lcms22.9-3
Debian 8lcms22.6-3+deb8u2
Debian 9chromium-browser69.0.3497.81-1~deb9u1
Debian 9lcms22.8-4+deb9u1
Red Hat rhel extras 6chromium-browser0:70.0.3538.67-1.el6_10
Red Hat rhel extras 6chromium-browser-debuginfo0:70.0.3538.67-1.el6_10
SUSE Enterprise Storage 4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Enterprise Storage 4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Desktop 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Desktop 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Desktop 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Desktop 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Desktop 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Module for Basesystem 15lcms22.9-3.3.1
SUSE Linux Enterprise Module for Legacy 15java-1_8_0-openjdk1.8.0.191-3.13.1
SUSE Linux Enterprise Module for Package Hub 15java-1_8_0-openjdk1.8.0.191-3.13.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP1-LTSSjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP2-BCLjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP2-LTSSjava-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Server 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server 12-LTSSjava-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3lcms22.7-9.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4java-1_8_0-openjdk1.8.0.191-27.29.1
SUSE Linux Enterprise Software Development Kit 12 SP3lcms22.7-9.7.1
SUSE OpenStack Cloud 7java-1_7_0-openjdk1.7.0.201-43.18.1
SUSE OpenStack Cloud 7java-1_8_0-openjdk1.8.0.191-27.29.1
Ubuntu 14.04 LTSlcms22.5-0ubuntu4.2
Ubuntu 16.04 LTSchromium-browser69.0.3497.81-0ubuntu0.16.04.1
Ubuntu 16.04 LTSlcms22.6-3ubuntu2.1
Ubuntu 16.04 LTSoxide-qtno fix
Ubuntu 18.04 LTSchromium-browser69.0.3497.81-0ubuntu0.18.04.1
Ubuntu 18.04 LTSlcms22.9-1ubuntu0.1
openSUSE Leap 15.0java-1_8_0-openjdk1.8.0.191-lp150.2.9.2
openSUSE Tumbleweedjava-1_8_0-openjdk1.8.0.302-2.2
openSUSE Tumbleweedlcms22.12-1.3