Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2016-10165: Little CMS may leak data or crash on bad image
CVE-2016-10165 · published 9 years ago
Summary
The Little CMS library (lcms2) that handles color profiles in images can be tricked by a specially crafted picture. This can let an attacker read private information or cause the program to stop working. Apply the latest security update for lcms2 from your Linux distribution to protect your systems.
What to do
- Update lcms2 to version 2.8-r1.
- Update lcms2 to version 2.8-r0.
- Update debian lcms2 to version 2.8-4.
- Update littlecms little_cms_color_engine to version 2.11 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Alpine:v3.10 | – | lcms2 |
< 2.8-r1 Fix: upgrade to 2.8-r1
|
| Alpine:v3.2 | – | lcms2 |
< 2.8-r0 Fix: upgrade to 2.8-r0
|
| Debian:12 | debian | lcms2 |
< 2.8-4 Fix: upgrade to 2.8-4
|
| Debian:13 | debian | lcms2 |
< 2.8-4 Fix: upgrade to 2.8-4
|
| Debian:14 | debian | lcms2 |
< 2.8-4 Fix: upgrade to 2.8-4
|
| – | littlecms | little_cms_color_engine |
< 2.11 cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:* |
| – | canonical | ubuntu_linux |
12.04 14.04 16.04 18.04 cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* |
| – | debian | debian_linux |
8.0 cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| – | opensuse | leap |
42.1 cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* |
| – | redhat | satellite |
5.8 cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_desktop |
5.0 6.0 7.0 cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_server |
5.0 6.0 7.0 cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_server_aus |
7.3 7.4 7.6 7.7 cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_server_eus |
7.3 7.4 7.5 7.6 7.7 cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_server_tus |
7.3 7.6 7.7 cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_workstation |
5.0 6.0 7.0 cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* |
| – | netapp | active_iq_unified_manager |
>= 7.3 >= 9.5 cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:* |
| – | netapp | e-series_santricity_management |
All versions
cpe:2.3:a:netapp:e-series_santricity_management:-:*:*:*:*:vmware_sra:*:* |
| – | netapp | e-series_santricity_os_controller |
11.0 11.0.0 11.20 11.25 11.30 11.30.5r3 11.40 11.40.3r2 11.40.5 11.50.1 11.50.2 11.60 5 more version ranges
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:* |
| – | netapp | oncommand_balance |
All versions
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:* |
| – | netapp | oncommand_insight |
All versions
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
| – | netapp | oncommand_performance_manager |
All versions
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:* |
| – | netapp | oncommand_shift |
All versions
cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:* |
| – | netapp | oncommand_unified_manager |
7.1 cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:* |
Original advisory text
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, whic...
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
References
- https://security-tracker.debian.org/tracker/CVE-2016-10165 Vendor Advisory
- https://security.alpinelinux.org/vuln/CVE-2016-10165 Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2079.html Third Party Advisory
- http://www.debian.org/security/2017/dsa-3774 Third Party Advisory
- http://www.securityfocus.com/bid/95808 Third Party Advisory VDB Entry
- https://access.redhat.com/errata/RHSA-2017:3267 Third Party Advisory
- https://usn.ubuntu.com/3770-1/ Third Party Advisory
- https://usn.ubuntu.com/3770-2/ Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2658.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/23/1 Mailing List Patch Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/25/14 Mailing List Patch Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Patch
- http://www.securitytracker.com/id/1039596 Third Party Advisory VDB Entry
- https://access.redhat.com/errata/RHSA-2017:2999 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3046 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3264 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3268 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3453 Third Party Advisory
- https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e... Issue Tracking Patch Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171019-0001/ Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
7.1
High
Type
CWE-125Out-of-bounds Read
Timeline
Published3 Feb 2017
Updated30 Oct 2026
First seen22 Sep 2026
Sources
DEBIAN-CVE-2016-10165 · OSV
ALPINE-CVE-2016-10165 · OSV
CVE-2016-10165 · NVD
CVE-2016-10165 · MITRE
Track software like this
Free during beta