There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstream_read call. A crafted input will lead to a remote denial of service attack.
{ "binaries": [ { "binary_name": "gir1.2-gxps-0.1", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps-dev", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps-doc", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps-utils", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps-utils-dbgsym", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps2", "binary_version": "0.3.1-1" }, { "binary_name": "libgxps2-dbgsym", "binary_version": "0.3.1-1" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-gxps-0.1", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps-dev", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps-doc", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps-utils", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps-utils-dbgsym", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps2", "binary_version": "0.3.2-2" }, { "binary_name": "libgxps2-dbgsym", "binary_version": "0.3.2-2" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-gxps-0.1", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-dev", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-doc", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils-dbgsym", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64-dbgsym", "binary_version": "0.3.2-4build3" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-gxps-0.1", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-dev", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-doc", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils-dbgsym", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64-dbgsym", "binary_version": "0.3.2-4build3" } ], "ubuntu_priority": "low", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-gxps-0.1", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-dev", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-doc", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps-utils-dbgsym", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64", "binary_version": "0.3.2-4build3" }, { "binary_name": "libgxps2t64-dbgsym", "binary_version": "0.3.2-4build3" } ], "ubuntu_priority": "low", "availability": "No subscription required" }