CVE-2017-9154
HighSummary
The libautotrace.a in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c.
Risk Assessment
This vulnerability may lead to service outages, affecting the application's availability and potentially disrupting its operation in a production environment.
Recommendation
It is recommended to upgrade to a newer version of AutoTrace to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Other vulnerabilities in libautotrace.a
See all- CVE-2017-9190High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
- CVE-2017-9189High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c.
- CVE-2017-9182High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
- CVE-2017-9181High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c.
- CVE-2017-9180High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14.
- CVE-2017-9179High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14.
- CVE-2017-9178High
The libautotrace.a in AutoTrace 0.31.1 has a vulnerability that allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11.
- CVE-2017-9177High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12.
- CVE-2017-9176High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25.
- CVE-2017-9175High
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25.
Original NVD description (English source)
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:16:11.