Summary
Melvin Kool discovered that the GDK-PixBuf library did not properly handle
certain GIF images. If an user or automated system were tricked into
opening a specially crafted GIF file, a remote attacker could use this flaw
to cause GDK-PixBuf to hang, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function writ…
References
-
report
https://ubuntu.com/security/CVE-2020-29385