High · published February 4, 2017
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
| Product | Versions | Fixed in |
|---|---|---|
| littlecms/little_cms_color_engine | < 2.11 | 2.11 |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| debian/debian_linux | all versions | — |
| opensuse/leap | all versions | — |
| redhat/satellite | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_aus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_eus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_server_tus | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| netapp/active_iq_unified_manager | ≥ 7.3 | — |
| netapp/active_iq_unified_manager | ≥ 9.5 | — |
| netapp/e-series_santricity_management | all versions | — |
| netapp/e-series_santricity_management | all versions | — |
| netapp/e-series_santricity_management | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/e-series_santricity_os_controller | all versions | — |
| netapp/oncommand_balance | all versions | — |
| netapp/oncommand_insight | all versions | — |
| netapp/oncommand_performance_manager | all versions | — |
| netapp/oncommand_shift | all versions | — |
| netapp/oncommand_unified_manager | all versions | — |
| netapp/oncommand_unified_manager | all versions | — |