rpm package
suse/gimp&distro=SUSE Linux Enterprise Workstation Extension 15 SP1
pkg:rpm/suse/gimp&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-17789 | Hig | 7.8 | < 2.8.22-5.3.1 | 2.8.22-5.3.1 | Dec 20, 2017 | In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. | |
| CVE-2017-17787 | Hig | 7.8 | < 2.8.22-5.8.1 | 2.8.22-5.8.1 | Dec 20, 2017 | In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c. | |
| CVE-2017-17786 | Hig | 7.8 | < 2.8.22-5.11.2 | 2.8.22-5.11.2 | Dec 20, 2017 | In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image. | |
| CVE-2017-17785 | Hig | 7.8 | < 2.8.22-5.11.2 | 2.8.22-5.11.2 | Dec 20, 2017 | In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. | |
| CVE-2017-17784 | Hig | 7.8 | < 2.8.22-5.11.2 | 2.8.22-5.11.2 | Dec 20, 2017 | In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data. |
- affected < 2.8.22-5.3.1fixed 2.8.22-5.3.1
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
- affected < 2.8.22-5.8.1fixed 2.8.22-5.8.1
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
- affected < 2.8.22-5.11.2fixed 2.8.22-5.11.2
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
- affected < 2.8.22-5.11.2fixed 2.8.22-5.11.2
In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.
- affected < 2.8.22-5.11.2fixed 2.8.22-5.11.2
In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data.