CVE-2016-3993

CWE-119 — Buffer Overflow11 documents7 sources
Severity
7.5HIGH
EPSS
1.1%
top 21.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Enlightenment Imlib2Debian Debian Linux
Timeline
PublishedMay 13
Latest updateMay 17

Description

Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted coordinates.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Debianimlib2< 1.4.8-1+3
▶Ubuntuimlib2< 1.4.6-2ubuntu0.1+1

Also affects: Debian Linux 7.0, 8.0

🔴Vulnerability Details

4
GHSA
GHSA-crhw-9c46-v779: Off-by-one error in the __imlib_MergeUpdate function in lib/updates↗2022-05-17
▶
OSV
imlib2 vulnerabilities↗2016-09-09
▶
CVEList
CVE-2016-3993: Off-by-one error in the __imlib_MergeUpdate function in lib/updates↗2016-05-13
▶
OSV
CVE-2016-3993: Off-by-one error in the __imlib_MergeUpdate function in lib/updates↗2016-05-13
▶

📋Vendor Advisories

2
Ubuntu
Imlib2 vulnerabilities↗2016-09-09
▶
Debian
CVE-2016-3993: imlib2 - Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 ...↗2016
▶

💬Community

4
Bugzilla
CVE-2016-3993 imlib2: off by one error in MergeUpdate [epel-7]↗2016-04-04
▶
Bugzilla
CVE-2016-3993 imlib2: off by one error in MergeUpdate↗2016-04-04
▶
Bugzilla
CVE-2016-3993 imlib2: off by one error in MergeUpdate [epel-6]↗2016-04-04
▶
Bugzilla
CVE-2016-3993 imlib2: off by one error in MergeUpdate [fedora-all]↗2016-04-04
▶
CVE-2016-3993 (HIGH CVSS 7.5) | Off-by-one error in the __imlib_Mer | cvebase.io