UBUNTU-CVE-2020-29385

GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function writeindexes. if c->selfcode equals 10, self->codetable[10].extends will assign the value 11 to c. The next execution in the loop will assign self->codetable[11].extends to c, which will give the value of 10. This will make the loop run infinitely. This bug can, for example, be triggered by calling this function with a GIF image with LZW compression that is crafted in a special way.

References

Affected packages

Ubuntu:20.04:LTS / gdk-pixbuf

Package

Name: gdk-pixbuf
Purl: pkg:deb/ubuntu/gdk-pixbuf@2.40.0+dfsg-3ubuntu0.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.40.0+dfsg-3ubuntu0.1

Affected versions

2.*

2.40.0+dfsg-1build1

2.40.0+dfsg-1ubuntu1

2.40.0+dfsg-2

2.40.0+dfsg-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "gir1.2-gdkpixbuf-2.0",
            "binary_version": "2.40.0+dfsg-3ubuntu0.1"
        },
        {
            "binary_name": "libgdk-pixbuf2.0-0",
            "binary_version": "2.40.0+dfsg-3ubuntu0.1"
        },
        {
            "binary_name": "libgdk-pixbuf2.0-bin",
            "binary_version": "2.40.0+dfsg-3ubuntu0.1"
        },
        {
            "binary_name": "libgdk-pixbuf2.0-common",
            "binary_version": "2.40.0+dfsg-3ubuntu0.1"
        },
        {
            "binary_name": "libgdk-pixbuf2.0-dev",
            "binary_version": "2.40.0+dfsg-3ubuntu0.1"
        }
    ],
    "availability": "No subscription required"
}