CVE-2016-3190
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2...
7.5 HighFix available
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.80%Up 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
CVE-2016-3190- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
CVE-2016-3190- Updated
- 2026-11-02
EUVDEUVD-2016-4231 No score
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
EUVD-2016-4231- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-79hm-39g3-fw94
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2...
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
GHSA-79hm-39g3-fw94- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
CVE-2016-3190- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-3190
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
- Record
DEBIAN-CVE-2016-3190- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2016:1100-1 No score
Security update for cairo
This update for cairo fixes the following issues:
- CVE-2016-3190: Fixed an out-of-bound read in the fill_xrgb32_lerp_opaque_spans function that might lead to a crash when processing a maliciously crafted image file (bsc#971964).
- Record
SUSE-SU-2016:1100-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cairoDebian:12 |
before 1.14.2-2 | 1.14.2-2 |
cairoDebian:13 |
before 1.14.2-2 | 1.14.2-2 |
cairoDebian:14 |
before 1.14.2-2 | 1.14.2-2 |
atk-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-develRed Hat:enterprise_linux:7::client |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairo-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-develRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobject-develRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-toolsRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dconf-develRed Hat:enterprise_linux:7::client |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-develRed Hat:enterprise_linux:7::client |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-testsRed Hat:enterprise_linux:7::client |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib2-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-develRed Hat:enterprise_linux:7::client |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-docRed Hat:enterprise_linux:7::client |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-famRed Hat:enterprise_linux:7::client |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-develRed Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-docRed Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gobject-introspection-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gobject-introspection-develRed Hat:enterprise_linux:7::client |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gtk2-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-develRed Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-devel-docsRed Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodulesRed Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-develRed Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-devel-docsRed Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodulesRed Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtksourceview3-debuginfoRed Hat:enterprise_linux:7::client |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
gtksourceview3-develRed Hat:enterprise_linux:7::client |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
harfbuzz-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-develRed Hat:enterprise_linux:7::client |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
json-glib-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
json-glib-develRed Hat:enterprise_linux:7::client |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libgsf-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libgsf-develRed Hat:enterprise_linux:7::client |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libnotify-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libnotify-develRed Hat:enterprise_linux:7::client |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libwebkit2gtkRed Hat:enterprise_linux:7::client |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
libxklavier-debuginfoRed Hat:enterprise_linux:7::client |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
libxklavier-develRed Hat:enterprise_linux:7::client |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24-debuginfoRed Hat:enterprise_linux:7::client |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
mozjs24-develRed Hat:enterprise_linux:7::client |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orc-compilerRed Hat:enterprise_linux:7::client |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-develRed Hat:enterprise_linux:7::client |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-docRed Hat:enterprise_linux:7::client |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pango-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-develRed Hat:enterprise_linux:7::client |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-testsRed Hat:enterprise_linux:7::client |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
webkitgtk3-develRed Hat:enterprise_linux:7::client |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
webkitgtk3-docRed Hat:enterprise_linux:7::client |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
atkRed Hat:enterprise_linux:7::client |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairoRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobjectRed Hat:enterprise_linux:7::client |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconfRed Hat:enterprise_linux:7::client |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-editorRed Hat:enterprise_linux:7::client |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2Red Hat:enterprise_linux:7::client |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib-networkingRed Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib-networking-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib2Red Hat:enterprise_linux:7::client |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24Red Hat:enterprise_linux:7::client |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gobject-introspectionRed Hat:enterprise_linux:7::client |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gtk2Red Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodule-ximRed Hat:enterprise_linux:7::client |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3Red Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodule-ximRed Hat:enterprise_linux:7::client |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtksourceview3Red Hat:enterprise_linux:7::client |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
harfbuzzRed Hat:enterprise_linux:7::client |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-icuRed Hat:enterprise_linux:7::client |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
json-glibRed Hat:enterprise_linux:7::client |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libgsfRed Hat:enterprise_linux:7::client |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libnotifyRed Hat:enterprise_linux:7::client |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libxklavierRed Hat:enterprise_linux:7::client |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24Red Hat:enterprise_linux:7::client |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orcRed Hat:enterprise_linux:7::client |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pangoRed Hat:enterprise_linux:7::client |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
shared-mime-infoRed Hat:enterprise_linux:7::client |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
shared-mime-info-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
webkitgtk3Red Hat:enterprise_linux:7::client |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
atk-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-develRed Hat:enterprise_linux:7::computenode |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairo-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-develRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobject-develRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-toolsRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconfRed Hat:enterprise_linux:7::computenode |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-develRed Hat:enterprise_linux:7::computenode |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-editorRed Hat:enterprise_linux:7::computenode |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-develRed Hat:enterprise_linux:7::computenode |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-testsRed Hat:enterprise_linux:7::computenode |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib2-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-develRed Hat:enterprise_linux:7::computenode |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-docRed Hat:enterprise_linux:7::computenode |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-famRed Hat:enterprise_linux:7::computenode |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24Red Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-develRed Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-docRed Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gobject-introspection-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gobject-introspection-develRed Hat:enterprise_linux:7::computenode |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gtk2-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-develRed Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-devel-docsRed Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodule-ximRed Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodulesRed Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-develRed Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-devel-docsRed Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodule-ximRed Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodulesRed Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
harfbuzz-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-develRed Hat:enterprise_linux:7::computenode |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
json-glib-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
json-glib-develRed Hat:enterprise_linux:7::computenode |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libgsfRed Hat:enterprise_linux:7::computenode |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libgsf-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libgsf-develRed Hat:enterprise_linux:7::computenode |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libnotify-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libnotify-develRed Hat:enterprise_linux:7::computenode |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libwebkit2gtkRed Hat:enterprise_linux:7::computenode |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
libxklavier-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
libxklavier-develRed Hat:enterprise_linux:7::computenode |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24Red Hat:enterprise_linux:7::computenode |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
mozjs24-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
mozjs24-develRed Hat:enterprise_linux:7::computenode |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orc-compilerRed Hat:enterprise_linux:7::computenode |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-develRed Hat:enterprise_linux:7::computenode |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-docRed Hat:enterprise_linux:7::computenode |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pango-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-develRed Hat:enterprise_linux:7::computenode |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-testsRed Hat:enterprise_linux:7::computenode |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
webkitgtk3-develRed Hat:enterprise_linux:7::computenode |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
webkitgtk3-docRed Hat:enterprise_linux:7::computenode |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
atkRed Hat:enterprise_linux:7::computenode |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairoRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobjectRed Hat:enterprise_linux:7::computenode |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
gdk-pixbuf2Red Hat:enterprise_linux:7::computenode |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib-networkingRed Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib-networking-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib2Red Hat:enterprise_linux:7::computenode |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
gobject-introspectionRed Hat:enterprise_linux:7::computenode |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gtk2Red Hat:enterprise_linux:7::computenode |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3Red Hat:enterprise_linux:7::computenode |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
harfbuzzRed Hat:enterprise_linux:7::computenode |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-icuRed Hat:enterprise_linux:7::computenode |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
json-glibRed Hat:enterprise_linux:7::computenode |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libnotifyRed Hat:enterprise_linux:7::computenode |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libxklavierRed Hat:enterprise_linux:7::computenode |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
orcRed Hat:enterprise_linux:7::computenode |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pangoRed Hat:enterprise_linux:7::computenode |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
shared-mime-infoRed Hat:enterprise_linux:7::computenode |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
shared-mime-info-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
webkitgtk3Red Hat:enterprise_linux:7::computenode |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
cairo-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-toolsRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-develRed Hat:enterprise_linux:7::server |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-testsRed Hat:enterprise_linux:7::server |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib2-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-docRed Hat:enterprise_linux:7::server |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-famRed Hat:enterprise_linux:7::server |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-develRed Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-docRed Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gtk2-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodulesRed Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-devel-docsRed Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodulesRed Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtksourceview3-debuginfoRed Hat:enterprise_linux:7::server |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
gtksourceview3-develRed Hat:enterprise_linux:7::server |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
json-glib-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
json-glib-develRed Hat:enterprise_linux:7::server |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libgsf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libgsf-develRed Hat:enterprise_linux:7::server |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libwebkit2gtkRed Hat:enterprise_linux:7::server |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
libxklavier-debuginfoRed Hat:enterprise_linux:7::server |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
libxklavier-develRed Hat:enterprise_linux:7::server |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24-debuginfoRed Hat:enterprise_linux:7::server |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
mozjs24-develRed Hat:enterprise_linux:7::server |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orc-compilerRed Hat:enterprise_linux:7::server |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-develRed Hat:enterprise_linux:7::server |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-docRed Hat:enterprise_linux:7::server |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pango-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-testsRed Hat:enterprise_linux:7::server |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
webkitgtk3-develRed Hat:enterprise_linux:7::server |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
webkitgtk3-docRed Hat:enterprise_linux:7::server |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
atkRed Hat:enterprise_linux:7::server |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-develRed Hat:enterprise_linux:7::server |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairoRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-develRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobjectRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobject-develRed Hat:enterprise_linux:7::server |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconfRed Hat:enterprise_linux:7::server |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-editorRed Hat:enterprise_linux:7::server |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2Red Hat:enterprise_linux:7::server |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-develRed Hat:enterprise_linux:7::server |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib-networkingRed Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib-networking-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib2Red Hat:enterprise_linux:7::server |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-develRed Hat:enterprise_linux:7::server |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24Red Hat:enterprise_linux:7::server |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gobject-introspectionRed Hat:enterprise_linux:7::server |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gobject-introspection-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gobject-introspection-develRed Hat:enterprise_linux:7::server |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gtk2Red Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-develRed Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-devel-docsRed Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodule-ximRed Hat:enterprise_linux:7::server |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3Red Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-develRed Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodule-ximRed Hat:enterprise_linux:7::server |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtksourceview3Red Hat:enterprise_linux:7::server |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
harfbuzzRed Hat:enterprise_linux:7::server |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-develRed Hat:enterprise_linux:7::server |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
harfbuzz-icuRed Hat:enterprise_linux:7::server |
before 0:0.9.36-1.el7 | 0:0.9.36-1.el7 |
json-glibRed Hat:enterprise_linux:7::server |
before 0:1.0.2-1.el7 | 0:1.0.2-1.el7 |
libgsfRed Hat:enterprise_linux:7::server |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libnotifyRed Hat:enterprise_linux:7::server |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libnotify-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libnotify-develRed Hat:enterprise_linux:7::server |
before 0:0.7.5-8.el7 | 0:0.7.5-8.el7 |
libxklavierRed Hat:enterprise_linux:7::server |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24Red Hat:enterprise_linux:7::server |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orcRed Hat:enterprise_linux:7::server |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pangoRed Hat:enterprise_linux:7::server |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-develRed Hat:enterprise_linux:7::server |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
shared-mime-infoRed Hat:enterprise_linux:7::server |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
shared-mime-info-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.1-9.el7 | 0:1.1-9.el7 |
webkitgtk3Red Hat:enterprise_linux:7::server |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
cairo-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-toolsRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-develRed Hat:enterprise_linux:7::workstation |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-testsRed Hat:enterprise_linux:7::workstation |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib2-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-docRed Hat:enterprise_linux:7::workstation |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-famRed Hat:enterprise_linux:7::workstation |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-develRed Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glibmm24-docRed Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gtk2-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk2-immodulesRed Hat:enterprise_linux:7::workstation |
before 0:2.24.28-8.el7 | 0:2.24.28-8.el7 |
gtk3-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-devel-docsRed Hat:enterprise_linux:7::workstation |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtk3-immodulesRed Hat:enterprise_linux:7::workstation |
before 0:3.14.13-16.el7 | 0:3.14.13-16.el7 |
gtksourceview3-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
gtksourceview3-develRed Hat:enterprise_linux:7::workstation |
before 0:3.14.3-1.el7 | 0:3.14.3-1.el7 |
libgsf-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libgsf-develRed Hat:enterprise_linux:7::workstation |
before 0:1.14.26-7.el7 | 0:1.14.26-7.el7 |
libwebkit2gtkRed Hat:enterprise_linux:7::workstation |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
libxklavier-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
libxklavier-develRed Hat:enterprise_linux:7::workstation |
before 0:5.4-7.el7 | 0:5.4-7.el7 |
mozjs24-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
mozjs24-develRed Hat:enterprise_linux:7::workstation |
before 0:24.2.0-6.el7 | 0:24.2.0-6.el7 |
orc-compilerRed Hat:enterprise_linux:7::workstation |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-develRed Hat:enterprise_linux:7::workstation |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
orc-docRed Hat:enterprise_linux:7::workstation |
before 0:0.4.22-5.el7 | 0:0.4.22-5.el7 |
pango-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
pango-testsRed Hat:enterprise_linux:7::workstation |
before 0:1.36.8-2.el7 | 0:1.36.8-2.el7 |
webkitgtk3-develRed Hat:enterprise_linux:7::workstation |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
webkitgtk3-docRed Hat:enterprise_linux:7::workstation |
before 0:2.4.9-5.el7 | 0:2.4.9-5.el7 |
atkRed Hat:enterprise_linux:7::workstation |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
atk-develRed Hat:enterprise_linux:7::workstation |
before 0:2.14.0-1.el7 | 0:2.14.0-1.el7 |
cairoRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-develRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobjectRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
cairo-gobject-develRed Hat:enterprise_linux:7::workstation |
before 0:1.14.2-1.el7 | 0:1.14.2-1.el7 |
dconfRed Hat:enterprise_linux:7::workstation |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
dconf-editorRed Hat:enterprise_linux:7::workstation |
before 0:0.22.0-2.el7 | 0:0.22.0-2.el7 |
gdk-pixbuf2Red Hat:enterprise_linux:7::workstation |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
gdk-pixbuf2-develRed Hat:enterprise_linux:7::workstation |
before 0:2.31.6-3.el7 | 0:2.31.6-3.el7 |
glib-networkingRed Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib-networking-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
glib2Red Hat:enterprise_linux:7::workstation |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glib2-develRed Hat:enterprise_linux:7::workstation |
before 0:2.42.2-5.el7 | 0:2.42.2-5.el7 |
glibmm24Red Hat:enterprise_linux:7::workstation |
before 0:2.42.0-1.el7 | 0:2.42.0-1.el7 |
gobject-introspectionRed Hat:enterprise_linux:7::workstation |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
gobject-introspection-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.42.0-1.el7 | 0:1.42.0-1.el7 |
cairoSUSE:Linux Enterprise Desktop 12 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Desktop 12 SP1 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Software Development Kit 12 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Server 12 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Server for SAP Applications 12 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Server 12 SP1 |
before 1.12.16-13.1 | 1.12.16-13.1 |
cairoSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 1.12.16-13.1 | 1.12.16-13.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3190 is a high vulnerability (CVSS 7.5) in Cairographics Cairo, published April 19, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in cairo 1.14.2-2.
References
bugzilla.redhat.com/show_bug.cgi?id=1318977
cgit.freedesktop.org/cairo/patch/src/cairo-image-compositor.c?id=5c82d91a5e15d29b1489dcb413b24ee7fdf59934
lists.opensuse.org/opensuse-updates/2016-04/msg00029.html
mail.gnome.org/archives/gnome-announce-list/2015-March/msg00047.html
nvd.nist.gov/vuln/detail/CVE-2016-3190
github.com/advisories/GHSA-79hm-39g3-fw94
Show 47 moreShow less
security-tracker.debian.org/tracker/CVE-2016-3190
access.redhat.com/errata/RHBA-2015:2116
help.gnome.org/misc/release-notes/3.10
security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_2116.json
cve.org/CVERecord?id=CVE-2016-3190
suse.com/support/update/announcement/2016/suse-su-20161100-1
bugzilla.suse.com/971964
This page doesn't list everything
Left out here: 28 package rows. The JSON record has them.