{"metadata": {"vulnerability": "CVE-2017-20286", "count": 16, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 10}}, "data": [{"timestamp": "2017-10-09T00:00:00Z", "date_only": false, "value": "2017-10-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2017-20286", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2017-20286", "record": "UBUNTU-CVE-2017-20286", "field": "published"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2017-20286", "record": "UBUNTU-CVE-2017-20286", "field": "modified"}, {"timestamp": "2026-10-14T13:07:15.528Z", "date_only": false, "value": "2026-10-14T13:07:15.528Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2017-20286", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:16:27.547Z", "date_only": false, "value": "2026-10-14T14:16:27.547Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2017-20286", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:16:27.547Z", "date_only": false, "value": "2026-10-14T14:16:27.547Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2017-20286", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:52:04.580Z", "date_only": false, "value": "2026-10-14T14:52:04.580800Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-20286", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:52:04.580Z", "date_only": false, "value": "2026-10-14T14:52:04.580800Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20286", "record": "FKIE_CVE-2017-20286", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T15:16:59Z", "date_only": false, "value": "2026-10-14T15:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5RW7-933R-F38V", "record": "GHSA-5RW7-933R-F38V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:16:59.163Z", "date_only": false, "value": "2026-10-14T15:16:59.163", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20286", "record": "FKIE_CVE-2017-20286", "field": "published"}, {"timestamp": "2026-10-14T15:32:21Z", "date_only": false, "value": "2026-10-14T15:32:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5RW7-933R-F38V", "record": "GHSA-5RW7-933R-F38V", "field": "published"}, {"timestamp": "2026-10-14T15:32:21Z", "date_only": false, "value": "2026-10-14T15:32:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5RW7-933R-F38V", "record": "GHSA-5RW7-933R-F38V", "field": "modified"}, {"timestamp": "2026-10-14T15:55:35.957Z", "date_only": false, "value": "2026-10-14T15:55:35.957Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2017-20286", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:55:35.957Z", "date_only": false, "value": "2026-10-14T15:55:35.957Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2017-20286", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:00:25.794Z", "date_only": false, "value": "2026-10-14T19:00:25.794360Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440802013332148", "record": "CVE-2017-20286", "field": "creation_timestamp", "uuid": "ad68c9fd-ad92-413d-b074-22624e30ba6f", "content": "CVE-2017-20286 DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. Attackers can supply a crafted two-frame GIF whose second frame uses disposal method 1 with a local colour table, writing up to 384 controlled bytes past the heap allocation and possibly executing code.\nhttps://www.cve.org/CVERecord?id=CVE-2017-20286https://github.com/DentonW/DevIL/issues/67https://hackmd.io/@haind-pwn/devil-gif-palette-reuse-heap-overflowhttps://github.com/DentonW/DevIL/blob/a2d9193fed0c7f93519c0c4c28b3348e0cb5759b/DevIL/src-IL/src/il_gif.cpp#L189-L226https://github.com/DentonW/DevIL/blob/a2d9193fed0c7f93519c0c4c28b3348e0cb5759b/DevIL/src-IL/src/il_gif.cpp#L314-L324https://www.vulncheck.com/advisories/devil-through-1.8.0-heap-buffer-overflow-via-gif-igetpalette#DentonW #DevIL#CVE_2017_20286#bot", "url": "https://infosec.exchange/users/cve/statuses/117440802013332148"}, {"timestamp": "2026-10-16T19:18:44.867Z", "date_only": false, "value": "2026-10-16T19:18:44.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-20286", "record": "FKIE_CVE-2017-20286", "field": "lastModified"}]}