Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2016-10165 PUBLISHED CVSS 7.099999904632568 HIGH

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Risk Scores

CVSS v3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.22lcms22.7-r0, 2.6-r0, 2.5-r0
Alpine:v3.12lcms20, 0, 2.5-r0
Alpine:v3.5lcms22.8-r0, 2.7-r1, 2.7-r0
Alpine:v3.2lcms22.7-r0, 0, 2.5-r0
Alpine:v3.8lcms22.8-r0, 2.7-r1, 2.7-r0
Alpine:v3.10lcms20, 2.5-r0, 2.6-r0
Alpine:v3.21lcms22.8-r0, 2.7-r1, 2.7-r0
Alpine:v3.16lcms22.8-r0, 2.6-r0, 2.7-r0
Alpine:v3.11lcms22.7-r1, 2.7-r0, 2.6-r0
Alpine:v3.7lcms22.7-r0, 2.8-r0, 2.7-r1
Alpine:v3.18lcms22.5-r0, 2.6-r0, 2.5-r0
Alpine:v3.3lcms22.7-r0, 0, 2.5-r0
Alpine:v3.19lcms22.6-r0, 2.7-r0, 2.7-r1
Alpine:v3.13lcms22.7-r0, 2.8-r0, 2.7-r1
Alpine:v3.9lcms22.7-r0, 2.8-r0, 0
Alpine:v3.17lcms22.6-r0, 0, 2.5-r0
Alpine:v3.23lcms22.5-r0, 0, 2.8-r0
Alpine:v3.20lcms22.5-r0, 2.8-r0, 2.7-r1
Alpine:v3.6lcms22.8-r0, 0, 2.5-r0
Alpine:v3.4lcms22.7-r0, 0, 2.5-r0

…and 2 more

Timeline

References

Open in Interactive Console →