GIMP: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 6

• Unscored —
  CVE-2017-17784

  In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import pa…

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017
• Unscored —
  CVE-2017-17785

  In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017
• Unscored —
  CVE-2017-17786

  In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.p…

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017
• Unscored —
  CVE-2017-17787

  In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017
• Unscored —
  CVE-2017-17788

  In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' chara…

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017
• Unscored —
  CVE-2017-17789

  In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.

  gimp gimp gimp Debian Ubuntu Alpine
  Dec 20, 2017

Revision history

1. 2026-02-23 #10

   Neue Updates von Ubuntu aufgenommen

2. 2021-01-04 #9

   Neue Updates von SUSE aufgenommen

3. 2020-12-29 #8

   Neue Updates von SUSE aufgenommen

4. 2020-12-28 #7

   Neue Updates von SUSE aufgenommen

5. 2020-09-10 #6

   Neue Updates von SUSE aufgenommen

6. 2020-03-08 #5

   Neue Updates von SUSE aufgenommen

7. 2018-01-07 #4

   Added references

8. 2018-01-01 #3

   New remediations available

9. 2017-12-19 #1

   Initial Release

10. 2017-12-19 #2

    Version nicht vorhanden

References

• OSS-SEC Mailing List Archives vom 2017-12-20
  http://seclists.org/oss-sec/2017/q4/427
• Debian Security Advisory DSA-4077 vom 2017-12-31
  https://www.debian.org/security/2017/dsa-4077
• Ubuntu Security Notice USN-3539-1 vom 2018-01-22
  http://www.ubuntu.com/usn/usn-3539-1/
• SUSE Security Update SUSE-SU-2020:0601-1 vom 2020-03-06
  https://www.suse.com/support/update/announcement/2020/suse-su-20200601-1.html
• SUSE Security Update SUSE-SU-2020:2604-1 vom 2020-09-10
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007400.html
• SUSE Security Update SUSE-SU-2020:2603-1 vom 2020-09-10
  http://lists.suse.com/pipermail/sle-security-updates/2020-September/007398.html
• SUSE Security Update SUSE-SU-2020:3940-1 vom 2020-12-28
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/008124.html
• SUSE Security Update SUSE-SU-2020:3944-1 vom 2020-12-29
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/008128.html
• SUSE Security Update SUSE-SU-2021:0014-1 vom 2021-01-04
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008131.html
• SUSE Security Update SUSE-SU-2021:0015-1 vom 2021-01-04
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008130.html
• Ubuntu Security Notice USN-8057-1 vom 2026-02-23
  https://ubuntu.com/security/notices/USN-8057-1