vulnerability

Alpine Linux: CVE-2018-16435: Out-of-bounds Write

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
2018-09-04
Added
2018-11-09
Modified
2024-10-01

Description

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Solution(s)

alpine-linux-upgrade-lcms2alpine-linux-upgrade-openjdk8
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.