potrace vulnerabilities and fixes

Recent CVEs affecting potrace, with upgrade or downgrade steps. 15 tracked.

potrace has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2017-08-01. Highest priority: CVE-2017-12067 (score 48/100).

• CVE-2017-7263 HIGH 7.8 DOWNGRADE The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of servi
• CVE-2017-12067 HIGH 7.5 DOWNGRADE Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
• CVE-2016-8703 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8702 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8701 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8700 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8699 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8698 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
• CVE-2016-8697 MEDIUM 5.5 UPGRADE The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (d
• CVE-2016-8696 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
• CVE-2016-8695 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
• CVE-2016-8694 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
• CVE-2016-8686 HIGH 7.8 UPGRADE The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a craft
• CVE-2016-8685 MEDIUM 5.5 UPGRADE The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (inv
• CVE-2013-7437 MEDIUM 5.0 DOWNGRADE Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via lar

FAQ

How do I fix potrace vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is potrace being exploited right now?

None of the tracked potrace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which potrace CVE should I patch first?

CVE-2017-12067 currently ranks highest (48/100): Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c..

RSS feed for potrace · ← Back to latest CVEs