ALINUX2-SA-2020%3A0058

ALINUX2-SA-2020%3A0058 PUBLISHED CVSS 5.300000190734863 MEDIUM

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2019-9210: In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

Risk Scores

CVSS 3.0

5.300000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
Alibaba Cloud	advancecomp

Timeline

Apr 2, 2020 CVE Published
Apr 2, 2020 CVE Updated

References

ALINUX2-SA-2020:0058: advancecomp security update (Moderate) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9210 advisory

Open in Interactive Console →