NetSight
IP …
high7.1

CVE-2016-10165

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an …

Impact

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Affected products

VendorProductAffected versions
LittlecmsLittle Cms Color Engine
before 2.11
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
DebianDebian Linux
Version 8.0
OpensuseLeap
Version 42.1
RedhatSatellite
Version 5.8
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
NetappActive Iq Unified Manager
from 7.3
from 9.5

Weakness classification

CWE-125

References