Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 530
Alerts This Week
Warning Icon 1 530

SUSE: 2018:3389-1 Moderate: Exempi Denial Of Service Issues

suse
Calendar Grey October 24, 2018
Dist Suse Esm H88
A SUSE security update for exempi addresses 6 issues including denial of service risks. Stay updated!
An update that fixes 6 vulnerabilities is now available

Summary

This update for exempi fixes the following security issues: - CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file (bsc#1085584). - CVE-2017-18238: The TradQT_Manager::ParseCachedBoxes function allowed remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file (bsc#1085583). - CVE-2018-7728: Fixed heap-based buffer overflow, which allowed denial of service via crafted TIFF image (bsc#1085297). - CVE-2018-7730: Fixed heap-based buffer overflow in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp (bsc#1085295). - CVE-2017-18236: The ASF_Support::ReadHeaderObject function allowed

Topics%20covered

Topics Covered

security advisory moderate denial of service security issue patch SUSE exempi

References

#1085295 #1085297 #1085583 #1085584 #1085585

#1085589

Cross- CVE-2017-18233 CVE-2017-18234 CVE-2017-18236

CVE-2017-18238 CVE-2018-7728 CVE-2018-7730

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

https://www.suse.com/security/cve/CVE-2017-18233.html

https://www.suse.com/security/cve/CVE-2017-18234.html

https://www.suse.com/security/cve/CVE-2017-18236.html

https://www.suse.com/security/cve/CVE-2017-18238.html

https://www.suse.com/security/cve/CVE-2018-7728.html

https://www.suse.com/security/cve/CVE-2018-7730.html

https://bugzilla.suse.com/1085295

https://bugzilla.suse.com/1085297

https://bugzilla.suse.com/1085583

Announcement ID: SUSE-SU-2018:3389-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service security issue patch SUSE exempi

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.