Severity

Medium

Vendor

Canonical Ubuntu

Versions Affected

• Canonical Ubuntu 14.04

Description

It was discoreved that GDK-PixBuf incorrectly handled certain gif images. An attacker could use this to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-1000422)

Ariel Zelivansky discovered that GDK-PixBuf incorrectly handled certain images. An attacker could use this to cause a denial of service. (CVE-2017-6312, CVE-2017-6313)

Ariel Zelivansky discovered that GDK-PixBuf incorrectly handled large TIFF files. An attacker could use this to cause a denial of service. (CVE-2017-6314)

Affected Cloud Foundry Products and Versions

Severity is medium unless otherwise noted.

• All versions of Cloud Foundry cflinuxfs2 prior to 1.180.0

Mitigation

OSS users are strongly encouraged to follow one of the mitigations below:

• The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs2 version 1.180.0 or later.

References

• USN-3532-1
• CVE-2017-1000422
• CVE-2017-6312
• CVE-2017-6313
• CVE-2017-6314