Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 22, 2017 | |
| Centos_linux | — | centos-upgrade-icoutilscentos-upgrade-icoutils-debuginfo | Mar 30, 2017 | Jan 17, 2017 |
| Debian | debian-upgrade-icoutils | Mar 31, 2017 | Jan 9, 2017 | |
| Freebsd | freebsd-upgrade-package-icoutils | Jan 19, 2017 | Jan 19, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-media-gfx-icoutils | Jan 12, 2018 | Aug 22, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-icoutils | Jan 18, 2018 | Aug 22, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-icoutils | Jan 18, 2018 | Aug 22, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-icoutils | Mar 23, 2017 | Jan 8, 2017 |
| Redhat_linux | — | redhat-upgrade-icoutilsredhat-upgrade-icoutils-debuginfo | Mar 26, 2017 | Jan 17, 2017 |
| Suse | — | suse-upgrade-icoutils | Jan 17, 2017 | Jan 17, 2017 |
| Ubuntu | ubuntu-upgrade-icoutils | Jan 25, 2017 | Jan 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub