FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-19 05:30:57 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
fe7ac70a-792b-11ee-bf9a-a04a5edf46d9PptiPNG -- Global-buffer-overflow

Frank-Z7 reports:

Running optipng with the "-zm 3 -zc 1 -zw 256 -snip -out" configuration options enabled raises a global-buffer-overflow bug, which could allow a remote attacker to conduct a denial-of-service attack or other unspecified effect on a crafted file.


Discovery 2023-09-30
Entry 2023-11-02
optipng
< 0.7.7_1

CVE-2023-43907
https://nvd.nist.gov/vuln/detail/CVE-2023-43907