{"id":"USN-8982-1","summary":"feh vulnerability","details":"It was discovered that feh incorrectly handled certain IPC messages from a\nclient pretending to be the Enlightenment window manager, leading to an\ninteger overflow. An attacker could possibly use this issue to cause feh to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.","modified":"2026-11-04T03:43:14.119579349Z","published":"2026-11-03T17:35:31Z","related":["UBUNTU-CVE-2017-7875"],"upstream":["CVE-2017-7875","UBUNTU-CVE-2017-7875"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8982-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2017-7875"}],"affected":[{"package":{"name":"feh","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/feh?arch=source&distro=esm-apps-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14-1ubuntu0.1~esm1"}]}],"versions":["2.13.1-1","2.14-1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro","binaries":[{"binary_name":"feh","binary_version":"2.14-1ubuntu0.1~esm1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2017-7875","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:16.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8982-1.json"}}],"schema_version":"1.9.2"}