DeutschShown in its original language — a full translation is planned for a future version.
GIMP: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2017-12-19
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-17789US | high7.8 | — | ||
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. | ||||
| CVE-2017-17788US | medium5.5 | — | ||
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string. | ||||
| CVE-2017-17787US | high7.8 | — | ||
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c. | ||||
| CVE-2017-17786US | high7.8 | — | ||
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA ima… | ||||
| CVE-2017-17785US | high7.8 | — | ||
In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. | ||||
| CVE-2017-17784US | high7.8 | — | ||
In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data. | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2603-1 vom 2020-09-10external
- SUSE Security Update SUSE-SU-2020:2604-1 vom 2020-09-10external
- OSS-SEC Mailing List Archives vom 2017-12-20external
- Ubuntu Security Notice USN-3539-1 vom 2018-01-22external
- SUSE Security Update SUSE-SU-2020:3940-1 vom 2020-12-28external
- SUSE Security Update SUSE-SU-2020:3944-1 vom 2020-12-29external
- SUSE Security Update SUSE-SU-2021:0015-1 vom 2021-01-04external
- SUSE Security Update SUSE-SU-2021:0014-1 vom 2021-01-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan