VYPR

rpm package

suse/netpbm&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1

pkg:rpm/suse/netpbm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Vulnerabilities (2)

  • CVE-2017-2580MedJul 27, 2018
    affected < 10.80.1-3.8.2fixed 10.80.1-3.8.2

    An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.

  • CVE-2017-2579LowJul 27, 2018
    affected < 10.80.1-3.8.2fixed 10.80.1-3.8.2

    An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.