autotrace: denial of service [LWN.net]

Package(s):

autotrace

CVE #(s):

CVE-2013-1953

Created:

June 19, 2013

Updated:

July 9, 2013

Description:

From the Red Hat bugzilla:

A buffer overflow flaw was reported in autotrace's input_bmp_reader() function. When autotrace is compiled with FORTIFY_SOURCE, this is caught and turned into a simple denial of service.

Alerts:

openSUSE	openSUSE-SU-2013:1044-1	2013-06-19
openSUSE	openSUSE-SU-2013:1049-1	2013-06-19
Mageia	MGASA-2013-0195	2013-07-01
Mandriva	MDVSA-2013:190	2013-07-02
Fedora	FEDORA-2013-11904	2013-07-09
Fedora	FEDORA-2013-12032	2013-07-09

(Log in to post comments)