CVE-2016-10164: Buffer Overflow
First published: Wed Jan 25 2017(Updated: )
An out of boundary write has been found in libXpm which can be exploited by an attacker through maliciously crafted XPM files. The affected code is prone to two 32 bit integer overflows while parsing extensions: the amount of extensions and their concatenated length. References: <a href="http://seclists.org/oss-sec/2017/q1/167">http://seclists.org/oss-sec/2017/q1/167</a> Upstream patch: <a href="https://cgit.freedesktop.org/xorg/lib/libXpm/commit/?id=d1167418f0fd02a27f617ec5afd6db053afbe185">https://cgit.freedesktop.org/xorg/lib/libXpm/commit/?id=d1167418f0fd02a27f617ec5afd6db053afbe185</a>
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| X.org Libxpm | <=3.5.11 | |
| redhat/libXpm | <3.5.12 | 3.5.12 |
Remedy
https://cgit.freedesktop.org/xorg/lib/libXpm/commit/?id=d1167418f0fd02a27f617ec5afd6db053afbe185
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2017/dsa-3772
- http://www.openwall.com/lists/oss-security/2017/01/22/2
- http://www.openwall.com/lists/oss-security/2017/01/25/7
- http://www.securityfocus.com/bid/95785
- https://access.redhat.com/errata/RHSA-2017:1865
- https://cgit.freedesktop.org/xorg/lib/libXpm/commit/?id=d1167418f0fd02a27f617ec5afd6db053afbe185
- https://lists.freedesktop.org/archives/xorg/2016-December/058537.html
- https://security.gentoo.org/glsa/201701-72
- http://seclists.org/oss-sec/2017/q1/167
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1416442
- https://bugzilla.redhat.com/show_bug.cgi?id=1416410
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-10164
- agent/software-canonical-lookup
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/x.org
- canonical/x.org libxpm
- version/x.org libxpm/3.5.11
- package-manager/redhat