CVE catalog

CVE-2017-2862

gdk-pixbuf: CVE-2017-2862

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.60% · Oct 25, 2026

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangdk-pixbufsid2.44.8+dfsg-1fixed
Debiangdk-pixbufforky2.44.8+dfsg-1fixed
Debiangdk-pixbuftrixie2.42.12+dfsg-4+deb13u1fixed
Debiangdk-pixbuftrixie-security2.42.12+dfsg-4+deb13u1fixed
Debiangdk-pixbufbookworm2.42.10+dfsg-1+deb12u4fixed
Debiangdk-pixbufbookworm-security2.42.10+dfsg-1+deb12u4fixed
Alpinegdk-pixbuf3.32.32.0-r2fixed
Alpinegdk-pixbuf3.42.34.0-r2fixed
Alpinegdk-pixbuf3.52.36.7-r0fixed
Alpinegdk-pixbuf3.62.36.7-r0fixed
Ubuntugdk-pixbuf14.042.28.1-1ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.0-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.1-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.2-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.2-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.3-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.4-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.5-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.6-1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.2vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.6vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.7fixed
Ubuntugdk-pixbuf16.042.32.1-1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1.2vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1.3fixed
Ubuntugdk-pixbuf14.042.28.1-1ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.0-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.1-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.2-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.2-0ubuntu2vulnerable
Ubuntugdk-pixbuf14.042.30.3-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.4-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.5-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.6-1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.1vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.2vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.6vulnerable
Ubuntugdk-pixbuf14.042.30.7-0ubuntu1.7fixed
Ubuntugdk-pixbuf16.042.32.1-1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1.2vulnerable
Ubuntugdk-pixbuf16.042.32.2-1ubuntu1.3fixed
Susegtk2linux enterprise software development kit 11 sp42.18.9-0.45.8.1fixed
Susegtk2linux enterprise server 11 sp42.18.9-0.45.8.1fixed
Susegtk2linux enterprise server for sap applications 11 sp42.18.9-0.45.8.1fixed
Susegdk-pixbuflinux enterprise desktop 12 sp22.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise desktop 12 sp32.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise server for raspberry pi 12 sp22.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise software development kit 12 sp22.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise software development kit 12 sp32.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise server 12 sp22.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise server for sap applications 12 sp22.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise server 12 sp32.34.0-19.5.1fixed
Susegdk-pixbuflinux enterprise server for sap applications 12 sp32.34.0-19.5.1fixed
Opensusegdk-pixbuftumbleweed2.42.6-3.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangdk-pixbufsourcesid2.36.10-1not yet assignedNot reported[874552]
Debiangdk-pixbufsourceforky2.36.10-1not yet assignedNot reported[874552]
Debiangdk-pixbufsourcetrixie2.36.10-1not yet assignedNot reported[874552]
Debiangdk-pixbufsourcebookworm2.36.10-1not yet assignedNot reported[874552]
Alpinegdk-pixbufapk3.32.32.0-r2Not reportedALPINE-CVE-2017-2862Not reported
Alpinegdk-pixbufapk3.42.34.0-r2Not reportedALPINE-CVE-2017-2862Not reported
Alpinegdk-pixbufapk3.52.36.7-r0Not reportedALPINE-CVE-2017-2862Not reported
Alpinegdk-pixbufapk3.62.36.7-r0Not reportedALPINE-CVE-2017-2862Not reported
Ubuntugdk-pixbufdeb14.042.30.7-0ubuntu1.7Not reportedUBUNTU-CVE-2017-2862Not reported
Ubuntugdk-pixbufdeb16.042.32.2-1ubuntu1.3Not reportedUBUNTU-CVE-2017-2862Not reported
Ubuntugdk-pixbufdeb14.042.30.7-0ubuntu1.7Not reportedUSN-3418-1Not reported
Ubuntugdk-pixbufdeb16.042.32.2-1ubuntu1.3Not reportedUSN-3418-1Not reported
Susegtk2rpmlinux enterprise software development kit 11 sp42.18.9-0.45.8.1Not reportedSUSE-SU-2018:2470-1Not reported
Susegtk2rpmlinux enterprise server 11 sp42.18.9-0.45.8.1Not reportedSUSE-SU-2018:2470-1Not reported
Susegtk2rpmlinux enterprise server for sap applications 11 sp42.18.9-0.45.8.1Not reportedSUSE-SU-2018:2470-1Not reported
Susegdk-pixbufrpmlinux enterprise desktop 12 sp22.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise desktop 12 sp32.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise server for raspberry pi 12 sp22.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise software development kit 12 sp22.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise software development kit 12 sp32.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise server 12 sp22.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise server for sap applications 12 sp22.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise server 12 sp32.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Susegdk-pixbufrpmlinux enterprise server for sap applications 12 sp32.34.0-19.5.1Not reportedSUSE-SU-2017:2381-1Not reported
Opensusegdk-pixbufrpmtumbleweed2.42.6-3.2Not reportedOPENSUSE-SU-2024:10779-1Not reported

[Debian bug #874552]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · all · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.10+dfsg-1+deb12u4 · all · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

    • 2.42.10+dfsg-1+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · bookworm; dsa · gdk-pixbuf · debian · 12

[Debian 13 (Trixie)]

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · all · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

  • Source package: [gdk-pixbuf]

    Details (4)
    • 2.42.12+dfsg-4+deb13u1 · all · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

    • 2.42.12+dfsg-4+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.36.10-1

      dsa · gdk-pixbuf · debian · 13

[openSUSE Tumbleweed]

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · noarch · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

  • Source package: [gdk-pixbuf]

    Details (1)
    • 2.44.7-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 2.42.6-3.2

      Version impact unknown

      dsa · gdk-pixbuf · opensuse · tumbleweed

Next results

Observed:

References