Detections
Analytics
Alpine: gdk-pixbuf: security update to 2.36.6-r0
high Tenable Self-Hosted Container Security Plugin ID 404547
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service
(NULL pointer dereference and application crash) via vectors related to printing an error message.
(CVE-2017-6311)
- Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service
(segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers
an out-of-bounds read, related to compiler optimizations. (CVE-2017-6312)
- The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to
cause a denial of service (infinite loop) via a large TIFF file. (CVE-2017-6314)
See Also
https://security.alpinelinux.org/vuln/CVE-2017-6311
Plugin Details
Severity: High
ID: 404547
Version: Revision 1.25
Type: Local
Published: 10/31/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2017-6311
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 3/10/2017
Reference Information
CVE: CVE-2017-6311, CVE-2017-6312, CVE-2017-6314
BID: 96779