The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.

The version of cairo installed on the remote host is prior to 1.12.14-6.9. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1392 advisory.

    The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows     remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative     span length. (CVE-2016-3190)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for cairo fixes the following issues :

  - CVE-2016-3190: Fixed an out-of-bound read in the     fill_xrgb32_lerp_opaque_spans function that might lead     to a crash when processing a maliciously crafted image     file (bsc#971964).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

cairo was updated to fix one security issue.

This security issue was fixed :

  - CVE-2016-3190: Out of bounds read in     fill_xrgb32_lerp_opaque_spans (bsc#971964).

ID	Name	Product	Family	Severity
138634	Amazon Linux AMI : cairo (ALAS-2020-1392)	Nessus	Amazon Linux Local Security Checks	high
90597	SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2016:1100-1)	Nessus	SuSE Local Security Checks	high
90483	openSUSE Security Update : cairo (openSUSE-2016-446)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2016-3190

high

Tenable Plugins

high

high

high