CVE-2017-9182
published 2017-05-23CVE-2017-9182: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR…
PriorityP434high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.23%
81.0th percentile
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autotrace_project | autotrace | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact
vendor_redhat·2021-02-11·CVSS 7.5
CVE-2019-19005 [HIGH] autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact
autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.
Package: autotrace (Red Hat Enterprise Linux 6) - Out of support scope
Package: autotrace (Red Hat Enterprise Linux 7) - Out of support scope
Red Hat
autotrace: Multiple security issues
vendor_redhat·2017-05-20·CVSS 7.5
CVE-2017-9182 [HIGH] autotrace: Multiple security issues
autotrace: Multiple security issues
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
Statement: Red Hat Product Security has rated these issues as having Low security impact. These issues are not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Package: autotrace (Red Hat Enterprise Linux 6) - Will not fix
Package: autotrace (Red Hat Enterprise Linux 7) - Will not fix
GHSA
GHSA-h25v-w22w-w3pj: A bitmap double free in main
ghsa_unreviewed·2022-05-24·CVSS 7.5
CVE-2019-19005 [HIGH] CWE-415 GHSA-h25v-w22w-w3pj: A bitmap double free in main
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.
GHSA
GHSA-56w4-5cfw-3cq2: libautotrace
ghsa_unreviewed·2022-05-14
CVE-2017-9182 [HIGH] CWE-416 GHSA-56w4-5cfw-3cq2: libautotrace
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
OSV
CVE-2019-19005: A bitmap double free in main
osv·2021-02-11·CVSS 7.5
CVE-2019-19005 [HIGH] CVE-2019-19005: A bitmap double free in main
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182.
OSV
CVE-2017-9182: libautotrace
osv·2017-05-23·CVSS 7.5
CVE-2017-9182 [HIGH] CVE-2017-9182: libautotrace
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
No detection rules found.
No public exploits indexed.
2017-05-23
Published