Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-2191: The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image. 99999: CVE-2016-2191 optipng: Invalid write while processing delta escapes without any boundary checking
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | optipng | 0:0.7.7-3.amzn2 |
| Amazon Linux · 2 | optipng-debuginfo | 0:0.7.7-3.amzn2 |
Vulnerabilities 1
-
Unscored —
The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2016-2191.html