Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-devel | Dec 1, 2016 | Mar 23, 2009 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | Oct 30, 2017 | Mar 23, 2009 |
| Oracle_linux | — | Upgrade lcms-develUpgrade python-lcmsUpgrade lcms | Oct 16, 2024 | Mar 23, 2009 |
| Suse | — | Upgrade liblcms-develUpgrade python-lcmsUpgrade lcmsUpgrade liblcms1-32bitUpgrade liblcms-devel-32bitUpgrade liblcms1-x86Upgrade liblcms1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade python-liblcmsUpgrade liblcms1 | Nov 8, 2024 | Mar 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub