Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-6314 PUBLISHED CVSS 5.5 MEDIUM

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.15gdk-pixbuf0, 2.36.6-r0, 2.36.5-r0
Alpine:v3.16gdk-pixbuf0, 2.36.6-r0, 2.36.5-r0
Alpine:v3.14gdk-pixbuf0, 2.22.0-r0, 2.22.0-r2
Alpine:v3.22gdk-pixbuf2.36.6-r0, 2.36.5-r0, 2.36.2-r0
Alpine:v3.9gdk-pixbuf0, 2.36.6-r0, 2.30.0-r0
Alpine:v3.18gdk-pixbuf2.36.6-r0, 2.22.0-r0, 2.22.0-r1
Alpine:v3.19gdk-pixbuf2.22.0-r1, 2.36.6-r0, 2.36.5-r0
Alpine:v3.7gdk-pixbuf2.22.0-r2, 0, 2.36.6-r0
Alpine:v3.12gdk-pixbuf2.31.5-r0, 0, 2.22.0-r0
Alpine:v3.17gdk-pixbuf2.36.6-r0, 2.22.0-r0, 2.22.0-r3
Alpine:v3.8gdk-pixbuf2.22.0-r3, 2.36.6-r0, 2.36.5-r0
Alpine:v3.13gdk-pixbuf2.22.0-r2, 2.24.0-r2, 2.22.0-r0
Alpine:v3.11gdk-pixbuf2.34.0-r2, 2.22.0-r0, 2.22.0-r1
Alpine:v3.3gdk-pixbuf2.28.2-r0, 2.24.0-r0, 2.26.5-r0
Alpine:v3.10gdk-pixbuf2.22.0-r0, 2.24.0-r1, 2.36.6-r0
Alpine:v3.6gdk-pixbuf2.22.0-r0, 2.36.6-r0, 2.36.5-r0
Alpine:v3.21gdk-pixbuf2.24.0-r2, 2.36.6-r0, 2.36.5-r0
Alpine:v3.20gdk-pixbuf2.36.6-r0, 0, 2.22.0-r0
Alpine:v3.4gdk-pixbuf2.22.0-r0, 0, 2.22.1-r1
Alpine:v3.2gdk-pixbuf2.22.0-r1, 2.22.0-r0, 2.22.1-r1

…and 2 more

Timeline

References

Open in Interactive Console →