CVE ID:	CVE-2018-8975
Description:	The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap- based buffer over-read) via a crafted image file, as demonstrated by pbmmask.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2019.0183   1.3.6.1.4.1.25623.1.0.878867   1.3.6.1.4.1.25623.1.1.2.2019.2173   1.3.6.1.4.1.25623.1.1.2.2020.1255   1.3.6.1.4.1.25623.1.0.852419   1.3.6.1.4.1.25623.1.1.2.2020.1470   1.3.6.1.4.1.25623.1.0.878882   1.3.6.1.4.1.25623.1.1.4.2019.0855.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8975 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LVMWVVFEADMA7XIPXFHGSBRYKEGGDFGE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEZRUJ5LNGULJL7QUAHPV5LBOKIJYP5I/ https://github.com/xiaoqx/pocs/blob/master/netpbm SuSE Security Announcement: openSUSE-SU-2019:1200 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00056.html