PatchTheCVEnetpbm project vulnerabilities
Recent CVEs affecting netpbm project products. 6 tracked.
netpbm project has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2018-07-27. Highest priority: CVE-2018-8975 (score 43/100).
- CVE-2018-8975 MEDIUM 5.5 UPGRADE The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cau
- CVE-2017-2587 LOW 3.3 UPGRADE A memory allocation vulnerability was found in netpbm before 10.61
- CVE-2017-2586 LOW 3.3 UPGRADE A null pointer dereference vulnerability was found in netpbm before 10.61
- CVE-2017-2581 MEDIUM 4.5 UPGRADE An out-of-bounds write vulnerability was found in netpbm before 10.61
- CVE-2017-2580 MEDIUM 4.5 DOWNGRADE An out-of-bounds write vulnerability was found in netpbm before 10.61
- CVE-2017-2579 LOW 3.3 DOWNGRADE An out-of-bounds read vulnerability was found in netpbm before 10.61
FAQ
How do I fix netpbm project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netpbm project being exploited right now?
None of the tracked netpbm project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netpbm project CVE should I patch first?
CVE-2018-8975 currently ranks highest (43/100): The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cau.