Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade lcms2 | Nov 9, 2018 | Sep 4, 2018 |
| Centos_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Aug 28, 2019 | Sep 4, 2018 |
| Debian | — | Upgrade lcms2 | Sep 6, 2018 | Sep 3, 2018 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | May 28, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lcms2 | Feb 22, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lcms2 | Jan 20, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lcms2 | Nov 2, 2020 | Sep 4, 2018 |
| Redhat_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfoNo solution exists | Oct 25, 2018 | Sep 3, 2018 |
| Suse | — | Upgrade java-1_8_0-openjdk-accessibilityUpgrade lcms2Upgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-openjdk-demoUpgrade liblcms2-devel-32bitUpgrade liblcms2-docUpgrade liblcms2-develUpgrade liblcms2-2-32bitUpgrade liblcms2-2Upgrade java-1_7_0-openjdkUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-openjdk-demo | Oct 28, 2018 | Sep 3, 2018 |
| Ubuntu | — | Upgrade liblcms1Upgrade liblcms2-2Upgrade liblcms-utilsUpgrade liblcms2-utils | Oct 2, 2018 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub