Candidate: CVE-2017-2580 PublicDate: 2018-07-27 18:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2580 Description: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH] Patches_netpbm-free: upstream_netpbm-free: needs-triage precise_netpbm-free: not-affected (code not present) trusty_netpbm-free: not-affected (code not present) trusty/esm_netpbm-free: DNE (trusty was not-affected [code not present]) vivid/stable-phone-overlay_netpbm-free: DNE vivid/ubuntu-core_netpbm-free: DNE xenial_netpbm-free: not-affected (code not present) esm-infra/xenial_netpbm-free: not-affected (code not present) yakkety_netpbm-free: not-affected (code not present) devel_netpbm-free: not-affected (code not present)