Several vulnerabilities have been discovered in apng2gif, a tool for converting APNG images to animated GIF format. Improper sanitization of user input can result in denial of service (application crash) or possible execution of arbitrary code if a malformed image file is processed. . -------------------------------------------------------------------------Debian LTS Advisory DLA-2911-1
apng2gif could be made to expose sensitive information if it opened a specifically crafted APNG file.. =========================================================================Ubuntu Security Notice USN-4513-1 September 17, 2020 apng2gif vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: apng2gif could be made to expose sensitive information if it opened a specifically crafted APNG file. Software Description: - apng2gif: tool for converting APNG images to animated GIF format Details: Dileep Kumar Jallepalli discovered that apng2gif incorrectly handled loading APNG files. An attacker could exploit this with a crafted APNG file to access sensitive information. (CVE-2017-6960) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: apng2gif 1.5-3+deb8u1build0.16.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4513-1 CVE-2017-6960 Package Information: https://launchpad.net/ubuntu/+source/apng2gif/1.5-3+deb8u1build0.16.04.1 . Stay informed on sensitive data exposure issues with apng2gif on Ubuntu 16.04 LTS. Follow essential update guidelines to protect your information effectively. apng2gif, information exposure, Ubuntu security. . Severity: Medium. LinuxSecurity.com Team
An issue has been found in apng2gif, a tool for converting APNG images to animated GIF format. . Package : apng2gif Version : 1.5-3+deb8u1 CVE ID : CVE-2017-6960 An issue has been found in apng2gif, a tool for converting APNG images to animated GIF format. One of the function contained an integer overflow resulting in a heap-based buffer over-read. For Debian 8 "Jessie", this problem has been fixed in version 1.5-3+deb8u1. We recommend that you upgrade your apng2gif packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A buffer overflow in libpng can lead to memory corruption. Update to version 1.6.37-3+deb10u1 to resolve the vulnerability.. apng2gif security, Debian LTS, buffer overflow issue. . LinuxSecurity.com Team
It was discovered that apng2gif was vulnerable to an integer overflow resulting in a heap-based buffer over-read/write. A remote attacker could use this flaw to cause a denial of service (application crash) via a crafted APNG file. . Hash: SHA256 Package : apng2gif Version : 1.5-1+deb7u1 CVE ID : CVE-2017-6960 Debian Bug : #854367 It was discovered that apng2gif was vulnerable to an integer overflow resulting in a heap-based buffer over-read/write. A remote attacker could use this flaw to cause a denial of service (application crash) via a crafted APNG file. For Debian 7 "Wheezy", these problems have been fixed in version 1.5-1+deb7u1. We recommend that you upgrade your apng2gif packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Keep up-to-date with the important png2gif revision tackling integer overflow vulnerabilities that may result in software failures.. Debian LTS, Apng2gif, Integer Overflow, Buffer Over-read, Denial of Service. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.