The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade lcms2Upgrade openjdk8 | Nov 9, 2018 | Sep 4, 2018 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Aug 28, 2019 | Sep 4, 2018 |
| Debian | — | Upgrade lcms2 | Sep 6, 2018 | Sep 3, 2018 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | May 28, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lcms2 | Feb 22, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lcms2 | Jan 20, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lcms2 | Nov 2, 2020 | Sep 4, 2018 |
| Redhat_linux | — | No solution existsUpgrade chromium-browser-debuginfoUpgrade chromium-browser | Oct 25, 2018 | Sep 3, 2018 |
| Suse | — | Upgrade liblcms2-devel-32bitUpgrade lcms2Upgrade liblcms2-2-32bitUpgrade java-1_8_0-openjdk-accessibilityUpgrade liblcms2-docUpgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-openjdk-demoUpgrade liblcms2-develUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade liblcms2-2Upgrade java-1_7_0-openjdk | Oct 28, 2018 | Sep 3, 2018 |
| Ubuntu | — | Upgrade liblcms2-2Upgrade liblcms1Upgrade liblcms2-utilsUpgrade liblcms-utils | Oct 2, 2018 | Sep 3, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub