Fluid Attacks Database

Description

A buffer overflow flaw was found in the autotrace package. This flaw allows an attacker to trick the user into opening a maliciously crafted BMP image, triggering arbitrary code execution or causing the application to crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
rpm rhel6	autotrace	-	-
rpm rhel7	autotrace	-	-
rpm rhel8	autotrace	<0:0.31.1-55.el8	0:0.31.1-55.el8
rpm rhel9	autotrace	<0:0.31.1-65.el9	0:0.31.1-65.el9

Aliases

1. CVE-2022-323232. NVD-2022-323233. OSV-2022-32323

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.