The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
{ "ubuntu_priority": "medium", "binaries": [ { "binary_version": "4.1.0~repack-2", "binary_name": "gigtools" }, { "binary_version": "4.1.0~repack-2", "binary_name": "gigtools-dbgsym" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libakai0" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libakai0-dbgsym" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig-dev" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig-doc" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig8" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig8-dbgsym" } ], "availability": "No subscription required" }
{ "ubuntu_priority": "medium", "binaries": [ { "binary_version": "4.1.0~repack-2", "binary_name": "gigtools" }, { "binary_version": "4.1.0~repack-2", "binary_name": "gigtools-dbgsym" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libakai0" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libakai0-dbgsym" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig-dev" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig-doc" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig8" }, { "binary_version": "4.1.0~repack-2", "binary_name": "libgig8-dbgsym" } ], "availability": "No subscription required" }