PatchTheCVEpotrace project vulnerabilities
Recent CVEs affecting potrace project products. 14 tracked.
potrace project has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2017-08-01. Highest priority: CVE-2017-12067 (score 48/100).
- CVE-2017-7263 HIGH 7.8 DOWNGRADE The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of servi
- CVE-2017-12067 HIGH 7.5 DOWNGRADE Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
- CVE-2016-8703 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8702 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8701 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8700 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8699 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8698 HIGH 7.8 UPGRADE Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote
- CVE-2016-8697 MEDIUM 5.5 UPGRADE The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (d
- CVE-2016-8696 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
- CVE-2016-8695 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
- CVE-2016-8694 MEDIUM 5.5 UPGRADE The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial o
- CVE-2016-8686 HIGH 7.8 UPGRADE The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a craft
- CVE-2016-8685 MEDIUM 5.5 UPGRADE The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (inv
FAQ
How do I fix potrace project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is potrace project being exploited right now?
None of the tracked potrace project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which potrace project CVE should I patch first?
CVE-2017-12067 currently ranks highest (48/100): Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c..