CVE-2017-16938

Priority
Description
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause
a denial-of-service attack or other unspecified impact with a maliciously
crafted GIF format file, related to an uncontrolled loop in the LZWReadByte
function of the gifread.c file.
References
Bugs
Notes
mdeslaurdoesn't reproduce with default compiler options in Ubuntu
Package
Upstream:released (0.7.6-1.1)
Ubuntu 18.04 LTS:not-affected (0.7.6-1.1)
Ubuntu 20.04 LTS:not-affected (0.7.6-1.1)
Ubuntu 21.10:not-affected (0.7.6-1.1)
Ubuntu 16.04 ESM:needed
Ubuntu 22.04 LTS:not-affected (0.7.6-1.1)
Ubuntu 14.04 ESM:DNE (trusty was needed)
Patches:
More Information

Updated: 2022-04-25 00:19:52 UTC (commit ecc1009cb19540b950de59270950018900f37f15)