Test ID:	1.3.6.1.4.1.25623.1.0.703555
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3555-1)
Summary:	The remote host is missing an update for the Debian 'imlib2' package(s) announced via the DSA-3555-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'imlib2' package(s) announced via the DSA-3555-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in imlib2, an image manipulation library. CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads and unreasonably large memory allocations. CVE-2016-3993 Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory read, which in turn could result in an application crash. CVE-2016-3994 Jakub Wilk discovered that a malformed image could lead to an out-of-bound read in the GIF loader, which may result in an application crash or information leak. CVE-2016-4024 Yuriy M. Kaminskiy discovered an integer overflow that could lead to an insufficient heap allocation and out-of-bound memory write. For the oldstable distribution (wheezy), these problems have been fixed in version 1.4.5-1+deb7u2. For the stable distribution (jessie), these problems have been fixed in version 1.4.6-2+deb8u2. For the unstable distribution (sid), these problems have been fixed in version 1.4.8-1. We recommend that you upgrade your imlib2 packages. Affected Software/OS: 'imlib2' package(s) on Debian 7, Debian 8. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5326 Debian Security Information: DSA-3555 (Google Search) http://www.debian.org/security/2016/dsa-3555 https://sourceforge.net/p/enlightenment/mailman/message/35055012/ SuSE Security Announcement: openSUSE-SU-2016:1330 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00076.html Common Vulnerability Exposure (CVE) ID: CVE-2014-9771 Common Vulnerability Exposure (CVE) ID: CVE-2016-3993 Common Vulnerability Exposure (CVE) ID: CVE-2016-3994 Common Vulnerability Exposure (CVE) ID: CVE-2016-4024 BugTraq ID: 86073 http://www.securityfocus.com/bid/86073 https://security.gentoo.org/glsa/201611-12 http://www.securitytracker.com/id/1035573
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.