CVE-2017-9185
published 2017-05-23CVE-2017-9185: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
PriorityP339critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.93%
77.7th percentile
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autotrace_project | autotrace | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
autotrace: Multiple security issues
vendor_redhat·2017-05-20·CVSS 9.8
CVE-2017-9185 [CRITICAL] autotrace: Multiple security issues
autotrace: Multiple security issues
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
Statement: Red Hat Product Security has rated these issues as having Low security impact. These issues are not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Package: autotrace (Red Hat Enterprise Linux 6) - Will not fix
Package: autotrace (Red Hat Enterprise Linux 7) - Will not fix
GHSA
GHSA-grpq-f7xq-qc92: libautotrace
ghsa_unreviewed·2022-05-17
CVE-2017-9185 [CRITICAL] CWE-190 GHSA-grpq-f7xq-qc92: libautotrace
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
OSV
CVE-2017-9185: libautotrace
osv·2017-05-23·CVSS 9.8
CVE-2017-9185 [CRITICAL] CVE-2017-9185: libautotrace
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues
bugzilla·2017-05-23·CVSS 9.8
CVE-2017-9151 [CRITICAL] CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues
CVE-2017-9151..CVE-2017-9200 autotrace: Multiple security issues
Multiple vulnerabilities were found in autotrace.
CVE-2017-9200: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.
CVE-2017-9199: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.
CVE-2017-9198: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18.
CVE-2017-9197: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55.
CVE-2017-9196: libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7.
CVE-2017-9195: libautotrace.a in AutoTrace 0.31.1 has a heap-based
Bugzilla
CVE-2016-9185 openstack-heat: Template source URL allows network port scan
bugzilla·2016-11-04·CVSS 4.3
CVE-2016-9185 [MEDIUM] CVE-2016-9185 openstack-heat: Template source URL allows network port scan
CVE-2016-9185 openstack-heat: Template source URL allows network port scan
A vulnerability was found in Heat. By launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration.
Upstream bug:
https://bugs.launchpad.net/ossa/+bug/1606500
Discussion:
Created openstack-heat tracking bugs for this issue:
Affects: fedora-all [bug 1391896]
---
Created openstack-heat tracking bugs for this issue:
Affects: openstack-rdo [bug 1392249]
---
This issue has been addressed in the following products:
Red Hat OpenStack Platform 8.0 (Liberty)
Via RHSA-2017:1456 https://access.redhat.com/errata/RHSA-2017:1456
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux OpenStack Platform 7.0 (Ki
2017-05-23
Published