PatchTheCVEnetpbm vulnerabilities and fixes
Recent CVEs affecting netpbm, with upgrade or downgrade steps. 7 tracked.
netpbm has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-07-27. Highest priority: CVE-2017-5849 (score 44/100).
- CVE-2018-8975 MEDIUM 5.5 UPGRADE The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cau
- CVE-2017-5849 MEDIUM 5.5 MITIGATE DOWNGRADE tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote
- CVE-2017-2587 LOW 3.3 UPGRADE A memory allocation vulnerability was found in netpbm before 10.61
- CVE-2017-2586 LOW 3.3 UPGRADE A null pointer dereference vulnerability was found in netpbm before 10.61
- CVE-2017-2581 MEDIUM 4.5 UPGRADE An out-of-bounds write vulnerability was found in netpbm before 10.61
- CVE-2017-2580 MEDIUM 4.5 DOWNGRADE An out-of-bounds write vulnerability was found in netpbm before 10.61
- CVE-2017-2579 LOW 3.3 DOWNGRADE An out-of-bounds read vulnerability was found in netpbm before 10.61
FAQ
How do I fix netpbm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netpbm being exploited right now?
None of the tracked netpbm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netpbm CVE should I patch first?
CVE-2017-5849 currently ranks highest (44/100): tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote.