advisories/24753.adv

type: security
subject: Updated netpbm packages fix security vulnerability
CVE:
 - CVE-2018-8975
src:
  6:
   core:
     - netpbm-10.73.07-1.1.mga6
description: |
  The pm_mallocarray2 function allowed remote attackers to cause a denial of
  service (heap-based buffer over-read) via a crafted image file
  (CVE-2018-8975).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24753
 - https://lists.opensuse.org/opensuse-updates/2019-04/msg00113.html
ID: MGASA-2019-0183
1	type: security
2	subject: Updated netpbm packages fix security vulnerability
3	CVE:
4	- CVE-2018-8975
5	src:
6	6:
7	core:
8	- netpbm-10.73.07-1.1.mga6
9	description: \|
10	The pm_mallocarray2 function allowed remote attackers to cause a denial of
11	service (heap-based buffer over-read) via a crafted image file
12	(CVE-2018-8975).
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=24753
15	- https://lists.opensuse.org/opensuse-updates/2019-04/msg00113.html
16	ID: MGASA-2019-0183