Description
Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | netpbm-free | 10.0-11.1 | — |
| Debian 13 | netpbm-free | 10.0-11.1 | — |
| Debian 12 | netpbm-free | 10.0-11.1 | — |
| Debian 4.0 | netpbm-free | 2:10.0-11.1+etch1 | DSA-1579-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | netpbm +2 | 10.25-2.EL4.6.el4_6.1 | RHSA-2008:0131 |
| RHEL 3 | netpbm +2 | 9.24-11.30.5 | RHSA-2008:0131 |
| RHEL 2 | netpbm +2 | 9.24-9.AS21.7 | RHSA-2008:0131 |
Advisories 2
- RHSA-2008:0131 Red Hat Security Advisory: netpbm security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1579-1 netpbm-free - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-665-1 vendor-advisory
- 27682 vdb-entry
- RHSA-2008:0131 vendor-advisory
- oval:org.mitre.oval:def:10975 vdb-entry signature
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464056
- 29079 third-party-advisory
- MDVSA-2008:039 vendor-advisory
- 1019358 vdb-entry
- 32607 third-party-advisory
- 30280 third-party-advisory
- ADV-2008-0460 vdb-entry
- DSA-1579 vendor-advisory
- https://issues.rpath.com/browse/RPL-2216