Search for packages
Package details: pkg:deb/ubuntu/lcms2@2.8-4
purl pkg:deb/ubuntu/lcms2@2.8-4
Next non-vulnerable version 2.9-1ubuntu0.1
Latest non-vulnerable version 2.9-1ubuntu0.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-tst4-dhas-aaap
Aliases:
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
2.9-1ubuntu0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-7g8v-91fw-aaan The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. CVE-2016-10165

Date Actor Action Vulnerability Source VulnerableCode Version