CVE-2016-6855: High severity red hat fedora vulnerability
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6855?
CVE-2016-6855 has a severity rating that classifies it as a denial of service vulnerability.
How do I fix CVE-2016-6855?
To fix CVE-2016-6855, upgrade to Eye of GNOME version 3.18.3, 3.20.4, or later, and ensure GLib is updated to version 2.44.1 or newer.
Which versions of Eye of GNOME are affected by CVE-2016-6855?
Affected versions of Eye of GNOME include 3.16.5, all 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4.
Which systems are impacted by CVE-2016-6855?
CVE-2016-6855 impacts systems running Eye of GNOME on Fedora, openSUSE, and Ubuntu such as Fedora 23 and 24, openSUSE Leap 42.1, and Ubuntu LTS releases from 12.04 to 16.04.
What kind of vulnerability is CVE-2016-6855?
CVE-2016-6855 is an out-of-bounds write vulnerability that can lead to a crash when invalid UTF-8 data is processed.