{"id":"CVE-2016-6855","aliases":["DEBIAN-CVE-2016-6855","DLA-2185-1","DLA-605-1","EUVD-2016-7740","GHSA-7jwp-58q4-9rxh","MGASA-2016-0297","SUSE-SU-2016:2827-1","UBUNTU-CVE-2016-6855","USN-3069-1","openSUSE-SU-2024:10170-1"],"status":"published","title":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.18381,"percentile":0.97249,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2016-08-23T00:00:00Z","modified":"2026-10-24T10:30:34Z","exploits":[{"source":"exploitdb","id":"EDB-40291","title":"Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write","type":"dos","platform":"linux","date":"2016-08-23","verified":true,"url":"https://www.exploit-db.com/exploits/40291"}],"fixes":[{"ecosystem":"Debian:12","package":"eog","fixed_in":["3.20.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"eog","fixed_in":["3.20.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"eog","fixed_in":["3.20.4-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"eog","fixed_in":["3.14.1-1+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"eog","fixed_in":["3.4.2-1+build1+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"eog","fixed_in":["3.14.3-1.2.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"eog","fixed_in":["3.10.2-2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"eog","fixed_in":["3.10.2-2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"eog","fixed_in":["3.10.2-2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"eog","fixed_in":["3.10.2-2.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"eog","fixed_in":["3.10.2-0ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"eog","fixed_in":["3.18.2-1ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1+deb8u1"}]}],"versions":["3.14.1-1"]},{"source":"osv","ecosystem":"Debian:7","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1+build1+deb7u1"}]}],"versions":["3.4.2-1+build1"]},{"source":"osv","ecosystem":"Mageia:5","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.3-1.2.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-2.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-0ubuntu5.2"}]}],"versions":["3.8.2-1ubuntu1","3.10.1-1ubuntu1","3.10.2-0ubuntu1","3.10.2-0ubuntu2","3.10.2-0ubuntu3","3.10.2-0ubuntu4","3.10.2-0ubuntu5","3.10.2-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.2-1ubuntu2.1"}]}],"versions":["3.16.3-1ubuntu2","3.18.0-0ubuntu1","3.18.0-1ubuntu1","3.18.0-1ubuntu2","3.18.1-1ubuntu1","3.18.1-1ubuntu2","3.18.2-1","3.18.2-1ubuntu1","3.18.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-0ubuntu5.2"}]}],"versions":["3.8.2-1ubuntu1","3.10.1-1ubuntu1","3.10.2-0ubuntu1","3.10.2-0ubuntu2","3.10.2-0ubuntu3","3.10.2-0ubuntu4","3.10.2-0ubuntu5","3.10.2-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.2-1ubuntu2.1"}]}],"versions":["3.16.3-1ubuntu2","3.18.0-0ubuntu1","3.18.0-1ubuntu1","3.18.0-1ubuntu2","3.18.1-1ubuntu1","3.18.1-1ubuntu2","3.18.2-1","3.18.2-1ubuntu1","3.18.2-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"eog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.5-1.1"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnome","product":"eye_of_gnome"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"https://git.gnome.org/browse/eog/plain/NEWS?h=3.20.4","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"https://git.gnome.org/browse/eog/commit/?id=e99a8c00f959652fe7c10e2fa5a3a7a5c25e6af4","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix"]},{"url":"https://www.exploit-db.com/exploits/40291/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"https://git.gnome.org/browse/eog/plain/NEWS?h=3.16.5","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"http://www.securityfocus.com/bid/92616","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6GFDHLNPUG7JHWM3QLXQNRA7NZGU2KI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3069-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=770143","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVINHHR6VJKXTYYMAYKN5GROKHVT4UKB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://git.gnome.org/browse/eog/plain/NEWS?h=3.18.3","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/04/msg00018.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6855"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVINHHR6VJKXTYYMAYKN5GROKHVT4UKB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T6GFDHLNPUG7JHWM3QLXQNRA7NZGU2KI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JVINHHR6VJKXTYYMAYKN5GROKHVT4UKB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6GFDHLNPUG7JHWM3QLXQNRA7NZGU2KI"},{"url":"https://www.exploit-db.com/exploits/40291"},{"url":"https://github.com/advisories/GHSA-7jwp-58q4-9rxh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-6855","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0297.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19244","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JVINHHR6VJKXTYYMAYKN5GROKHVT4UKB/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162827-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/994819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6855","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-6855","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3069-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6855","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7447","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-6855","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-09-07T18:00:00Z","modified":"2024-08-06T01:43:38.473Z","updated_at":"2026-11-02T14:33:34.815789Z"}],"euvd":[{"id":"EUVD-2016-7740","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-09-07T18:00:00Z","modified":"2024-08-06T01:43:38Z","updated_at":"2026-11-03T02:22:35.048987Z"}],"ghsa":[{"id":"GHSA-7jwp-58q4-9rxh","title":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2022-05-14T02:08:58Z","modified":"2025-04-12T13:04:54Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:01:29.190007Z"}],"nvd":[{"id":"CVE-2016-6855","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-09-07T18:59:05.703Z","modified":"2026-06-17T00:51:53.677Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:29.893676Z"}],"osv":[{"id":"CVE-2016-6855","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-09-07T18:59:05.703Z","modified":"2026-10-24T10:30:34.549828978Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-6855","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-09-07T18:59:05.703Z","modified":"2026-09-22T07:02:12.599121916Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"UBUNTU-CVE-2016-6855","description":"Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.","status":"published","published":"2016-08-23T00:00:00Z","modified":"2026-04-22T10:55:32.450298Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-2185-1","title":"eog - security update","status":"published","published":"2020-04-25T00:00:00Z","modified":"2026-03-09T01:21:22.263507Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-605-1","title":"eog - security update","status":"published","published":"2016-08-29T00:00:00Z","modified":"2026-03-09T02:10:19.122092Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2016-0297","title":"Updated eog packages fix security vulnerability","description":"An out-of-bounds write vulnerability in eog was found when processing specially\ncrafted SVG file. Due to passing the error message containing invalid UTF-8\ncharacter to GMarkup, out-of-bounds access is triggered (CVE-2016-6855).\n","status":"published","published":"2016-08-31T17:34:12Z","modified":"2026-04-16T06:23:14.715477426Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10170-1","title":"eog-3.20.5-1.1 on GA media","description":"These are all security issues fixed in the eog-3.20.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:01.204307Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:2827-1","title":"Security update for eog","description":"\nThis update for eog fixes the following issues:\n\n- out-of-bounds write in eog (bsc#994819, CVE-2016-6855)\n\n","status":"published","published":"2016-11-17T14:05:03Z","modified":"2025-05-02T04:05:29.181517Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3069-1","title":"eog vulnerability","description":"It was discovered that Eye of GNOME incorrectly handled certain invalid\nUTF-8 strings. If a user were tricked into opening a specially-crafted\nimage, a remote attacker could use this issue to cause Eye of GNOME to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2016-08-25T14:18:00Z","modified":"2026-04-22T09:27:51.584335Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}