UBUNTU-CVE-2017-7875: Buffer Overflow
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.
Affected Software
Event History
Frequently Asked Questions
Which installations are affected?
Installations using feh versions earlier than 2.18.3 are affected. The issue is in feh's handling of IPC messages in wallpaper.c.
What does an attacker need to exploit this issue?
An attacker needs to act as a malicious client that can pretend to be the E17 window manager and send an IPC message to feh. No authentication, privileges, or user interaction are indicated by the provided severity vector.
How can I determine whether I need to remediate?
Check the installed feh version. Versions before 2.18.3 should be treated as vulnerable, especially where feh can receive IPC messages from a client impersonating the E17 window manager.
What is the available remediation?
Upgrade feh to version 2.18.3 or later. The affected range is explicitly limited to versions before 2.18.3.